ScanMalware.com

Security Scan Report: sochi-bloknot.ru

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/386c60b0-6340-4912-b906-d2345a7ab10aDomain and IP registration (RDAP)/api/v1/rdap/386c60b0-6340-4912-b906-d2345a7ab10aHow often this domain was scanned/api/v1/domain/stats/sochi-bloknot.ruScan history for this domain/api/v1/domain/history/sochi-bloknot.ru?limit=15
This website contacted 312 IPs in 11 countries across 176 domains to perform 1389 HTTP transactions. The main domain is sochi-bloknot.ru.

Submitted URL: https://sochi-bloknot.ru

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Established Russian regional news site (Блокнот Сочи) with its own brand, real news content, no credential/payment forms and no threat-intel, hunting rule or IDS hits. Only noise is ad-driven redirects; low risk.

Risk Factors (2)
Excessive redirect chain: 367 redirects (330 cross-domain) before settling on the final URL, largely through ad-tech hosts (stbid.ru, dsp.mts.ru, adiam.tech, adlook.tech, adspector.io) — noteworthy but the final URL matches the entry URL
Domain is unranked in Cisco Umbrella top 1M (weak prior only; not evidence of wrongdoing)
Safety Factors (5)
Self-branding: site name matches its own domain, not a third-party brand
No credential-harvesting or payment form present in the captured DOM
No threat-intelligence, hunting rule, JavaScript behavioral, or network IDS indicators
Registered Russian media outlet with Roskomnadzor registration number and copyright notice
Domain age ~2.8 years, well outside the newly-registered risk window
Domain age information unavailable

Details

Page Title

Новости Сочи сегодня - Блокнот Сочи

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'sochi-bloknot.ru' is registered without a subdomain. The registrable portion 'sochi-bloknot' spans 13 characters holding four vowels versus 8 consonants, along with one hyphen. Breaking it apart gives three words: sochi, blok, not. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

7% сочи ПОНЕДЕЛЬНИК, 12 ОКТЯБРЯ РАГОСТИНИЦЫ МАГАЗИНЫ Жительница Сочи впала в кому на Бали после отравления местным вином Погода в Сочи ‘подробный прогноз © 13° 21° 230 1.5 м/с 762 мм ртс. 09 2.1...

Page Load Overview

90.28s
Total Load Time
32.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:8,734 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14591.206.127.28Russia
AS201706Servicepipe LLC
4185.17.11.202St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
477.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
495.181.182.182Perm, Perm Krai, Russia
AS210756EdgeCenter LLC
4185.17.11.203St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
4109.238.90.100Russia
AS201706Servicepipe LLC
4212.41.11.107Moscow, Moscow, Russia
AS50340JSC Selectel
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
488.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
477.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
1389312--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18364F73555E0203D6013A191AA6AAB0D76AAE07BEF074E58F6DC2771DFC6DF1AC2314C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:zEuEKlVJbD7wk7yuaQHaIDvgMpaz/exAqu:zEuBXJbD7wSyuaVIpu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:316033:uBvDrQwQBhgUiQJw4QAywgwCwgG5NixKLSAQspFYwWQHSYojQmYRQiNyJQQAgECCzhAErDk8HPATiBgcIAwgCJIlYYsBZIVp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:df83878bc183ff1b
Perceptual Hash:b8b286e7499636c3
Difference Hash:3a3f3f331b2f3ab3
Wavelet Hash:df8387898183db1b
Color Hash:N/A

Other Hashes

Crop Resistant:3a3f3f331b2f3ab3,96a6b2962292aaaa,5e5e5e5e5ea4a810,5b7b1fdc9cdbdb9d,60b0b13121b1f9e8,dcccdd7c787851d9,a78383a4a4a5a486

Scan History

Scan history not available

Unable to load historical scan data