ScanMalware.com

Security Scan Report: photar.ru

Site favicon
Submitted: Sep 21, 2026, 11:21:59 PMCompleted: Sep 21, 2026, 11:22:28 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Well-established 15-year-old Russian photography news site displaying its own brand, with editorial content and no impersonation, credential harvesting, or malware. Threat-intel tag is generic abuse reputation on an unrelated third-party IP.

Risk Factors (1)
One password field present in the site's own user login/registration area (established domain, self-branded — consistent with a legitimate CMS login)
Safety Factors (5)
15-year-old established domain with consistent historical identity
Site displays only its own brand; no impersonation of any other entity
No payment fields and no credential-harvesting forms (password fields = 1, disguised password = 0, payment = 0)
No JavaScript malware, no YARA hits, no phishing kit in roster
Threat-intel match is reputation-only on an unrelated third-party IP, not the site's host
Domain age information unavailable

Details

Page Title

Photar.ru - Путеводитель в мире фотографии

Scan Type

public

Domain Name Analysis

The domain name 'photar.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'photar' spans 6 characters holding two vowels versus four consonants. Tokenizing the label suggests 3 words: p, hot, ar. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://photar.ru

Page Load Overview

7.12s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:14,886 chars
Detector Agreement:80%

Website Classification

Primary Category

education learning59% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
59%
adult content
57%
corporate
35%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16185.200.242.223St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
495.163.53.117Russia
AS47764LLC VK
4142.251.13.95Google · CDNUnited States
AS15169Google LLC
4172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
477.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4142.251.110.138Google · CDNUnited States
AS15169Google LLC
4149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
4104.17.111.223Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
45.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
17641--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1446419B64A75185F634B2582F8CC2B4E2BDF42BDCF8E1A10E5F9C55836D1C6AD5C822C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:XLC/12vCN/3BhR6469qk3SsLf/aazRSa1L540+Wa1L3T9eQwfda22GNwhwZk3Spc:7CcvCN/3BhR6469qk3SsLf/aazRSa1Lw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:320176:ogAIABIJkIQPEYoER6SlG6BAWMygGQnFbBAQPJIUAkCBGNIAATj44OQlgFIcAwKACRwAwybBDEQREQCkGgAJHyBUAR9KTTdA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3c3c3c3c3c3
Perceptual Hash:ec96c31c3c64636d
Difference Hash:3c2607173717330b
Wavelet Hash:04ffc3c383c3c3c3
Color Hash:#2d866d

Other Hashes

Crop Resistant:3c2607173717330b,e3e3e2fdfdfafaeb,010334c4cccc1141,8222376776726a90,2001c08c92002720,40808080f078b8fc

Scan History

Scan history not available

Unable to load historical scan data