ScanMalware.com

Security Scan Report: photar.ru

Site favicon
Submitted: Oct 1, 2026, 10:08:15 AMCompleted: Oct 1, 2026, 10:09:27 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Established 15-year-old Russian photography blog with self-branding, no impersonation, no payment/credential phishing, and no content-malware indicators. Only minor excessive redirects; safe to use.

Risk Factors (1)
Excessive redirects (6 total, 5 cross-domain) add minor ambiguity but no phishing evidence
Safety Factors (5)
Well-established domain (over 15 years old)
Self-branding matches the domain; no impersonation of another brand
No payment fields and no credential exfiltration detected
No JavaScript YARA malware patterns, no native-YARA high-precision hits, and no malicious kit roster match
Legitimate content pattern: photography news, reviews, and tutorials with social media links
Domain age information unavailable

Details

Page Title

Photar.ru - Путеводитель в мире фотографии

Scan Type

public

Domain Name Analysis

The domain name 'photar.ru' uses the Russian country-code top-level domain (.ru). The second-level label 'photar' is 6 characters long split between 2 vowels and four consonants. Tokenizing the label suggests three words: p, hot, ar. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://photar.ru

Page Load Overview

8.23s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:14,876 chars
Detector Agreement:80%

Website Classification

Primary Category

education learning50% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
50%
adult content
47%
corporate
35%
healthcare medical
28%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27185.200.242.223St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
495.163.53.117Russia
AS47764LLC VK
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
477.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
4142.251.13.100Google · CDNUnited States
AS15169Google LLC
4149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
4104.16.160.145Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
20746--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1646419B64A65185F234B2582F8CC2B4E27DF02FDCF9E1A10E5F9D59836D1C6AD5C822C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:PLCQ12ZiGBhR6469qk3SF9a1LZRa1LXt3yrwP4Rda22iwhwZk3SMONTZxdI:zCjBhR6469qk3STa1LZRa1LXt3yrwP4g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:322566:ANIyOi7QTJA4IeAQECCgABEBAwSigbgWRUYMA4RIetEJtpBARECXA4gARAUSANIZ0lAgIUMpOmGAZRXIoxEicELceCkAEAEi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data