ScanMalware.com

Security Scan Report: mehanik35.ru

Site favicon
Submitted: Sep 30, 2026, 11:28:36 AMCompleted: Sep 30, 2026, 11:30:46 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

No phishing, malware, or credential harvesting found, but the metalworking site is repurposed for off-topic alcohol-treatment SEO spam with a heavy cross-domain redirect chain and ad/tracking scripts.

Risk Factors (4)
Content/topic mismatch: metalworking branding used to host off-topic alcohol-treatment spam links
Excessive cross-domain redirect chain (25 redirects)
Cross-origin network POST to unaffiliated domain ip.mehanoid.pro
Heavy third-party advertising/tracking monetization on an otherwise informational site
Safety Factors (4)
Domain is ~4 years old (well-established registration)
No Indicators of Compromise, YARA malware, IDS alerts, or Safe Browsing hits
No password, payment, or disguised credential fields; no credential exfiltration detected
No brand impersonation — page uses its own self-branding
Domain age information unavailable

Details

Page Title

Механика металла

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'mehanik35.ru' is registered without a subdomain. The second-level label 'mehanik35' is 9 characters long containing 3 vowels alongside four consonants; it also includes 2 digits. Word splitting yields 4 words: meh, a, nik, 35. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mehanik35.ru

Page Load Overview

90.10s
Total Load Time
34.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:9,509 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical57% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
57%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1089.169.42.183Russia
AS29182JSC IOT
331.129.109.116St Petersburg, St.-Petersburg, Russia
AS198610Beget LLC
387.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
390.156.170.209Russia
AS198610Beget LLC
3155.212.203.195Moscow, Moscow, Russia
AS47764LLC VK
3151.236.71.248Germany
AS204720Global Cloud Network LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
377.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
390.156.232.15Russia
AS47764LLC VK
15449--

Detected Technologies7

Open-Graph-Protocolvwebsite
100%
WordPress
80%
PHP
50%
MySQL
50%
jQuery
20%
Yandex.Metrika
20%
Swiper
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169446BF1A1A124BB265391D2E0AA770D70B5842BDE460911F2BCA9BC3FD1FD28173B0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:vBmBU2ueJ/LDD44ofwZTXF3ft17CKgs9Yf/Ok:vsjRDD44MK2/Ok

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:273252:hU8QVS5iwyJcgAQAM0JaFHFxVxAAMg4BAepA7BBQJBxECgYsABACIjDyAdBWTXEr+pFAQkMq0AqOIKpCSCJFqAgIAGYEsSii

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c1c09033c7cff
Perceptual Hash:8338d645add2ba1b
Difference Hash:d0d0f9f383f0d0c8
Wavelet Hash:3c3c1c01033c7eff
Color Hash:#d23d2d

Other Hashes

Crop Resistant:f8793b9bf8f97979,d0d0f9f383f0d0c8,f6f6f6b6f6c6e6e6,f8f8f87878f9f9f9,d0d0f9f183f3f0d0,d011f369c9490942

Scan History

Scan history not available

Unable to load historical scan data