Security Scan Report: kto-chto-gde.ru

Site favicon
Submitted: Sep 21, 2026, 3:56:05 PMCompleted: Sep 21, 2026, 3:58:10 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 58%

4
Risk Score

Established Russian lifestyle-magazine site with only search forms and no credential/payment capture or impersonation; one unverified single-source intel match on a third-party resource and heavy redirects warrant caution, not a scam verdict.

Risk Factors (4)
Domain is unranked in Cisco Umbrella top 1M
Single-source unverified threat-intel match on a third-party resource (magentocore) loaded by the page
Excessive redirect chain: 28 redirects, 25 of them cross-domain
Heavy third-party ad/monetization infrastructure
Safety Factors (6)
Domain age 1003 days (WELL_ESTABLISHED, minimal risk category)
Page displays its own brand (title/meta match the domain) — no brand impersonation
No credential, password, or payment fields; only site-search forms
No JavaScript malware (YARA) patterns and no credential exfiltration detected
Standard blog/article content (og:type=article) with no calls to action for data entry
Only network IDS alert is an informational ET INFO ZeroSSL TLS certificate observation
Domain age information unavailable

Details

Page Title

КТО ЧТО ГДЕ — интересные факты, имена, праздники и советы

Scan Type

public

Domain Name Analysis

Domain 'kto-chto-gde.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. Count 12 characters in 'kto-chto-gde' with 3 vowels and 7 consonants, plus 2 hyphens. Breaking it apart gives six words: k, to, ch, to, g, de. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kto-chto-gde.ru

Page Load Overview

75.16s
Total Load Time
5.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:70%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:8,138 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content76% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
76%
travel tourism
66%
news media journalism
63%
education learning
59%
government public service
50%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36217.168.241.60Moscow, Moscow, Russia
AS50340JSC Selectel
2212.8.232.116Moscow, Moscow, Russia
AS61400Start2 LLC
2142.251.20.154Google · CDNUnited States
AS15169Google LLC
277.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
277.223.124.19Moscow, Moscow, Russia
AS50340JSC Selectel
2212.109.217.26Russia
AS29182JSC IOT
237.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
292.53.64.248Moscow, Moscow, Russia
AS49505JSC Selectel
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
283.222.28.39Russia
AS47764LLC VK
16666--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D14A73390E5246B12039686D9617F1EB8A6803BDF5B0E54BAFC0A7DFFD6D924E13109

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4QJyTmXA+H/58Uq/eD8ZPLeIgeZpJ4GoqqYx4M2m1hj:S08Uq/S8LBZpJ4GobYR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:205505:GwI4GhIElYAFVEoiJiJOQEciLFCClAmiiggSCIwMJODAFviFgAghDiIagXhDlRAMIQLETDVHUnwAcJQiCKIQAiyXRExMNIAt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cbc3c3c3c3c3c3df
Perceptual Hash:b97b9267962782c2
Difference Hash:1a1b1b33130313b7
Wavelet Hash:cbc383838383c3df
Color Hash:#ac535f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data