Security Scan Report: fotoload.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 14 domains to perform 107 HTTP transactions. The main domain is fotoload.ru.

Submitted URL: https://fotoload.ru

The Cisco Umbrella rank of the primary domain is #572,791 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

18-year-old Russian photo-hosting community showing its own brand; own login/registration forms, no impersonation, no Indicators of Compromise, no malware. Only a minor cross-domain redirect chain.

Risk Factors (1)
4 cross-domain redirects observed before landing on the final page (minor, no phishing indicators attached)
Safety Factors (7)
Domain age 6813 days (well-established, registered 2008)
Self-branding: pages present their own brand, not another entity's
No Indicators of Compromise or threat-intel matches
No JavaScript malware patterns (YARA clean)
No network IDS alerts
No cross-origin credential forms; no credential exfiltration detected
No payment or counterfeit-goods indicators
Domain age information unavailable

Details

Page Title

Fotoload - это сообщество фотографов и творческих людей. Фотохостинг ru

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'fotoload.ru' is registered and has no subdomain. The second-level label 'fotoload' is 8 characters long split between four vowels and four consonants. Word splitting yields 2 words: foto, load. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fotoload.ru

Page Load Overview

75.09s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:70%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:24,317 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing39% confidence
Type: spa
Method: ml+structural

All Detected Categories

download file sharing
39%
forum
25%
social_media
20%

Detected Features

Login Form
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
115.9.84.163Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
4142.251.110.155Google · CDNUnited States
AS15169Google LLC
487.240.132.67Russia
AS47541LLC VK
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
477.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
488.212.201.204Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4193.3.184.135Russia
AS50214QWARTA LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
10725--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18474C835F4F581732A17A05DD965F60AAF22111F9D81CD0CF7AC4CA4BFC2B65CA921CA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:RnUYe+6kOCzmw15eZq9YN6LKcMdtPRsDtCw4:hFe+6kOCzmw15eZq9YN6LKNdfsDs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:346672:BCnNHjQECKjBDRgC4A4JJQmFAotsiFCxhQCbKHALhCWEShUAgUDACKAAQgtkH8Ad6MAgJgAEgonCEH0AoBBQixMQBsgdEkIS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data