Security Scan Report: goldenlib.ru

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted

AI Security Verdict

Low Risk

Confidence: 40%

3
Risk Score

Only a Cloudflare bot-check wall was captured, so the real page is unaudited. A 20-year-old domain with no Indicators of Compromise or YARA hits, but two HIGH obfuscated-JS IDS alerts and an unranked script host. Insufficient data - not benign, not confirmed malicious.

Risk Factors (4)
Real page content is unauditable behind a Cloudflare challenge - verification gaps cut both ways
Two HIGH network IDS alerts for obfuscated JavaScript (ET WEB_CLIENT Obfuscated Javascript // ptth)
Unranked third-party script host (pbnbots.com) contacted via XMLHttpRequest by page scripts
Well-established domain (20 years) with no Umbrella ranking and a low 30/100 legitimacy score
Safety Factors (6)
Domain registered 2006-02-13 (about 20 years old), risk category WELL_ESTABLISHED
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript YARA malware patterns and no known malicious kit in the roster
No credential/payment form facts available, but none of the automatic escalation rules (IoC, YARA, base64-email lure, brand impersonation) fire
The visible interstitial is a standard Cloudflare Turnstile bot check, and the site displays only its own domain name (self-branding), not another entity's brand
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'goldenlib.ru' is registered. The second-level label 'goldenlib' is 9 characters long holding 3 vowels versus six consonants. Splitting it apart reveals two words: golden, lib. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goldenlib.ru

Page Load Overview

0.56s
Total Load Time
976 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:378 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
78%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9D2FA73EB08225B563746EFB680FB84113172A05616637AFCE636648FC905A3A733C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2mRDqjyWZatAaZHINSFQT2qGTiq97Vb31:vqjyWRa8T2zTp5Vb31

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28793:FKCOJ2O6QDVCMgDUByegQaHgjAw4C12QOOCgQAACC9pQSkQAHiQDgGiEVPQQRAgAEYgA64IjiClAHU/kdIFqoCUBCA9sxDI0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3ffffffffe7
Perceptual Hash:b03830cec6cfc6ce
Difference Hash:109e16100000000c
Wavelet Hash:3c000c3c0f0f3f03
Color Hash:#e06c79

Other Hashes

Crop Resistant:109e16100000000c

Scan History

Scan history not available

Unable to load historical scan data