Security Scan Report: go.mail.ru

Redirected to:
https://mail.ru/?autologin=no
Site favicon
Submitted: Completed: publiccompleted
This website contacted 45 IPs in 2 countries across 25 domains to perform 110 HTTP transactions. The main domain is mail.ru and was registered 29 years ago.

Submitted URL: https://go.mail.ru

Effective URL:
https://mail.ru/?autologin=no
Redirected

The Cisco Umbrella rank of the primary domain is #3,665 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 88%

0
Risk Score

go.mail.ru redirects to mail.ru, the brand's own official 29-year-old portal. No credential/payment forms, no threat-intel, YARA or IDS hits. The lone ML 'phishing' label is unsupported; page is legitimate.

Safety Factors (5)
Official first-party domain (mail.ru) with 29-year registration history
Top-10K Cisco Umbrella ranking (#3665)
No credential, password or payment fields present (0/0/0)
No IoC, YARA, IDS, or Safe Browsing threat matches
Cross-origin script calls are limited to common analytics/portal infrastructure (yandex, google-analytics)
Domain age information unavailable

Details

Page Title

Mail: Почта, Облако, Календарь, Заметки, Покупки — сервисы для работы и жизни

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'go.mail.ru' is registered, featuring subdomain 'go'. The second-level label 'mail' is 4 characters long holding 2 vowels versus two consonants. Word splitting yields one word: mail. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://go.mail.ru

Page Load Overview

80.10s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,049 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam45% confidence
Type: spa
Method: ml+structural

All Detected Categories

phishing scam
45%
healthcare medical
43%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2289.221.239.1Russia
AS47764LLC VK
295.163.61.107Russia
AS47764LLC VK
295.213.56.1Russia
AS47541LLC VK
2217.69.139.61Russia
AS47764LLC VK
295.163.59.212Russia
AS47764LLC VK
295.163.52.80Russia
AS47764LLC VK
295.163.58.196Russia
AS47764LLC VK
295.163.58.202Russia
AS47764LLC VK
2142.251.20.97Google · CDNUnited States
AS15169Google LLC
2155.212.203.196Moscow, Moscow, Russia
AS47764LLC VK
11045--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T199059DF16255303E5113B07AE23F760D323EA02BED058614FE6DDA659FDACA95223B4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:aIrFQVMciWJkrl99jlGn5WOIu3wXwiWOZEl+0kzKQYZ:aIrCkxiWOzAXXWOZEl+0g+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:837985:tUCCxs0RL1BBSIRiVEgAuKDeOowJEAUkSGLkQhh0EhZggIQYQkeUAVkUMJggYAkAoFEESbBQEEuFIIGdIgqBg9IIxbCCAHBB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:04bfc3c38fcfdfe1
Perceptual Hash:bf1e5e17466470d0
Difference Hash:7c7986065e181f03
Wavelet Hash:04bfc3c1878fc7c1
Color Hash:#1f7293

Other Hashes

Crop Resistant:7c7986065e181f03

Scan History

Scan history not available

Unable to load historical scan data