ScanMalware.com

Security Scan Report: megaresheba.ru

Site favicon
Submitted: Sep 20, 2026, 11:53:23 PMCompleted: Sep 20, 2026, 11:55:14 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Established 14-year Russian homework-answers portal with no credential or payment forms and no content-malware evidence. Heavy redirects and ad-tech obfuscation are the only concerns; threat-intel hits are reputation-only on third-party resource IPs.

Risk Factors
Excessive redirect chain (39 redirects, 18 cross-domain)
Heavy ad-tech dependency and obfuscated inline scripts
Two single-source, unverified abuse-reputation reports on third-party sub-resource addresses
Safety Factors
Domain is 14 years old (registered 2012-07-31), well-established
No password, disguised-password, or payment fields — no credential or payment harvesting
No cross-origin credential forms and no credential exfiltration detected
No YARA/JavaScript malware patterns and no known malicious kit in roster
Self-branded content matching domain; page is a homework/study-answers portal with substantial legitimate content
No Indicators of Compromise, Safe Browsing, or content-malware hits on the scanned page itself
Domain age information unavailable

Details

Page Title

ГДЗ - готовые домашние задания и решебники

Scan Type

public

Domain Name Analysis

The domain name 'megaresheba.ru' uses the Russian country-code top-level domain (.ru). Count 11 characters in 'megaresheba' with 5 vowels and 6 consonants. Splitting it apart reveals 3 words: meg, are, sheba. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://megaresheba.ru

Page Load Overview

75.20s
Total Load Time
60.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:RU
Text Length:14,786 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
51%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17185.191.197.116Russia
AS42244eServer s.r.o.
1777.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
17185.87.194.181Moscow, Moscow, Russia
AS210079EuroByte LLC
17178.218.214.147Russia
AS42244eServer s.r.o.
1777.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
17178.218.214.146Russia
AS42244eServer s.r.o.
1788.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
17185.191.197.56Russia
AS42244eServer s.r.o.
175.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1737.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
66339--

Detected Technologies2

Open-Graph-Protocolvwebsite
100%
DDoS-Guard
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F612F53AEAC484D3310A1179DD17E44BC6F893F9B28692175ED0DAEBFC129580B336D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:KIqg/46PupBbbcTIqgp+3IqgyhqY3YJfutN9lSMaIn3Qb:Io4suK3XVnutd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3447:CgECSABQJAAAUQIQAAhIAAAIBgEBgCACEIBFBBAARAAgAAEKBTAiAKIoAAAUBAAgBAkAAEDQABRCBhAAoAgEAIIEAAAAFAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8ff787f7879740
Perceptual Hash:bfd9189f608f07c0
Difference Hash:36366626266e669e
Wavelet Hash:bf8fa383b383a700
Color Hash:#80862d

Other Hashes

Crop Resistant:36366626266e669e

Scan History

Scan history not available

Unable to load historical scan data