Security Scan Report: megaresheba.ru

Site favicon
Submitted: Oct 3, 2026, 3:09:25 PMCompleted: Oct 3, 2026, 3:11:32 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 62%

3
Risk Score

Long-established Russian homework-help site (Мегарешеба) with ordinary educational content and no credential/payment forms, impersonation, Indicators of Compromise or malware. Ad-heavy cross-domain redirect chains and shortener fetches warrant only minor caution.

Risk Factors (3)
Excessive redirect chain (76 hops, 64 cross-domain) is characteristic of ad-monetization funnels and can route users through untrusted intermediaries
2 HIGH-tagged informational Suricata alerts referencing *.work TLD DNS query and HTTP request (ET INFO heuristics, not phishing/malware verdicts)
Cross-origin fetch/sendBeacon to krut.link (link shortener, rank ~719K) — an untrusted intermediary contacted by page scripts
Safety Factors (4)
14-year-old established domain with consistent educational content and consistent self-branding
No credential, login or payment capture fields anywhere on the page
No Indicators of Compromise, no YARA malware, no known malicious kit, no brand impersonation
Content is ordinary educational/ГДЗ material (content classifier: education learning)
Domain age information unavailable

Details

Page Title

ГДЗ - готовые домашние задания и решебники

Scan Type

public

Domain Name Analysis

The domain name 'megaresheba.ru' uses the Russian country-code top-level domain (.ru). Count 11 characters in 'megaresheba' holding 5 vowels versus six consonants. It segments into three words: meg, are, sheba. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://megaresheba.ru

Page Load Overview

75.41s
Total Load Time
6.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:RU
Text Length:14,816 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
51%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3185.191.197.116Russia
AS42244eServer s.r.o.
377.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3185.87.194.181Moscow, Moscow, Russia
AS210079EuroByte LLC
3178.218.214.146Russia
AS42244eServer s.r.o.
388.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
3185.191.197.56Russia
AS42244eServer s.r.o.
3185.191.196.115Russia
AS42244eServer s.r.o.
3178.218.223.42Russia
AS42244eServer s.r.o.
3178.218.212.115Russia
AS42244eServer s.r.o.
337.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
354118--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E564EB0043F9507659A3E223ABA01A157D9306BFF69B770631BC2A6DBFC1D50A94B34F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:19iVGoU038ZRe6HoU038ZRe6Y/7BgJUYF16cVrwgfWt2lgy6Crr+anx+dL5/yNSl:XRx+dLsQ1G4HXhV7IRP812NG7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:333869:GEwAJxWKzIDhGs0CRiQkFJAYhACACmE1eNdCGAAUW5QBUtWAhACSQCAcWggGAECCABCko2IoCjAVCEoqBpTBoxWbwYZIAKUg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8ff787f7879740
Perceptual Hash:bfd9189f608f07c0
Difference Hash:36366626266e669e
Wavelet Hash:bf8fa383b383a700
Color Hash:#e0856c

Other Hashes

Crop Resistant:36366626266e669e

Scan History

Scan history not available

Unable to load historical scan data