ScanMalware.com

Security Scan Report: kuzbass1.ru

Site favicon
Submitted: Oct 4, 2026, 3:21:56 AMCompleted: Oct 4, 2026, 3:23:57 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Self-branded Russian regional news site (Кузбасс Первый) with no forms collecting credentials or payment, no Indicators of Compromise, YARA or IDS hits. Only anomaly is a long cross-domain redirect chain. Low risk.

Risk Factors (2)
Excessive redirect chain (11 hops, 10 cross-domain) adds noise but is not tied to any credential or payment collection
Domain is unranked in Cisco Umbrella and only ~227 days old
Safety Factors (5)
Page presents only its own brand (self-branding matching its own domain)
No credential, login, or payment forms — no data-harvesting surface
No Indicators of Compromise, YARA malware, IDS alerts, or Safe Browsing hits
Cross-origin JS traffic limited to Yandex analytics/metrica (mc.yandex.ru, ranked) — normal for a legitimate media site
Content, phone numbers, and copyright holder are internally consistent with a regional news broadcaster
Domain age information unavailable

Details

Page Title

Кузбасс Первый - Новости Кузбасса, развлекательные и информационные проекты

Scan Type

public

Domain Name Analysis

The domain name 'kuzbass1.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The core label 'kuzbass1' covers 8 characters split between two vowels and 5 consonants; it also includes one digit. It segments into four words: ku, z, bass, 1. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kuzbass1.ru

Page Load Overview

80.15s
Total Load Time
35.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:3,581 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service44% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
44%
entertainment media
35%
corporate
35%
documentation technical
27%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1493.95.102.63Russia
AS48347JSC Mediasoft ekspert
9104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
987.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
9104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9178.248.233.148Russia
AS51115HLL LLC
977.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
9151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
9151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
9151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
9109.238.90.239Russia
AS201706Servicepipe LLC
23025--

Detected Technologies12

X-UA-Compatible
100%
WordPressv7.1.2
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.5.1
100%
Bootstrapv1.0.0
100%
PHP
50%
MySQL
50%
jsDelivr
20%
Yandex.Metrika
20%
VK Pixel
20%
Smart Slider 3
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1863496E258DA46EE111FD145E4D6E2E4A3D5B176DFCFC985B1F6A0388FCA48025E320E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:8jjnh60vhPid6LYcbiEgU7DUJK0KI+iG2ShUZ7N3Ecesi7Wvx:4h60vh57gJTx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:235636:Pp2gDUcADJYCqsBoGIYoRAIGuJNLohBFKiQAUGiEg90UTVyKsEAdgYKPYMtCQCYQ3YQSZIgG4nU4QRKOAFiMBSQA0XxIUYgE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data