ScanMalware.com

Security Scan Report: kaktus.media

Site favicon
Submitted: Jun 28, 2026, 9:38:10 PMCompleted: Jun 28, 2026, 9:39:48 PMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 3 countries across 9 domains to perform 1 HTTP transaction. The main domain is kaktus.media and was registered NaN years ago.

Submitted URL: https://kaktus.media

AI Security Verdict

Low Risk

Confidence: 75%

3
Risk Score

The site appears to be a legitimate news outlet but exhibits heavy script obfuscation and many redirects, yielding a moderate risk rating.

Risk Factors
High JavaScript obfuscation and dynamic code execution
Large redirect chain
High‑severity IDS alerts indicating potentially bad traffic
Safety Factors
No credential or payment collection forms
Domain age > 8 years, indicating long‑standing registration
No Indicators of Compromise or malware YARA matches
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Кактус – новости Кыргызстана и Бишкека

Scan Type

public

Language

🇷🇺

Russian

(80% confidence)

Category

corporate

(50%)

Domain Information

You're looking at domain 'kaktus.media' on the .media top-level domain with no subdomain. The registrable portion 'kaktus' spans 6 characters containing two vowels alongside 4 consonants. Tokenizing the label suggests three words: ka, kt, us. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kaktus.media

Page Load Overview

7.27s
Total Load Time
247
HTTP Requests
21
Domains
5.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:80%
Script Type:Cyrillic
HTML Lang Attribute:ru
Text Length:7,918 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37142.251.127.97United States
AS15169Google LLC
30157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3087.250.250.119Russia
AS13238YANDEX LLC
30192.178.183.139United States
AS15169Google LLC
305.255.255.77Moscow, Moscow, Russia
AS13238YANDEX LLC
30142.251.110.95United States
AS15169Google LLC
30104.17.207.5United States
AS13335Cloudflare, Inc.
30136.110.156.179Kansas City, Missouri, United States
AS396982Google LLC
2478--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A24453A350F1027F020B90C45ABF3A2C8B427A1BFF974DD0B39C19985FD9DE1A567868

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:O688pSWZoZIlq+hGlYirFgl7EkDf2kvBXR9FRvLZvodR0f:XSWZAIlqrlpBgl9BXRDRd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:269355:oBHIgQ0DANAiFBAdUggARsBMBuYgwyDIQCKgAeHroCUgB/QIgAQxTwQSCOEg4nxqAiI6OENmCUEjkAcSBACiVSgAG6ReAISE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data