Security Scan Report: slideshowtomsk.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 45 IPs in 2 countries across 31 domains to perform 631 HTTP transactions. The main domain is slideshowtomsk.ru and was registered 10 years ago.

Submitted URL: https://slideshowtomsk.ru

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate-looking slideshow site likely compromised: primary domain has a StrelaStealer threat-intel match and the page loads/POSTs to a malicious third-party resource, with excessive cross-domain redirects.

Risk Factors (5)
Indicators of Compromise match on the primary domain for StrelaStealer
Third-party resource skillboxultra.live is flagged as malicious 'wp inject' by multiple feeds
Cross-origin POST to the flagged malicious domain skillboxultra.live
Excessive redirect chain with 25 cross-domain hops
Unranked third-party script host loaded by the page
Domain age information unavailable

Details

Page Title

Создание слайд-шоу — Создание слайд-шоу из фотографий с музыкой

Scan Type

public

Domain Name Analysis

Domain 'slideshowtomsk.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Count 14 characters in 'slideshowtomsk' containing 4 vowels alongside 10 consonants. Word splitting yields two words: slideshow, tomsk. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://slideshowtomsk.ru

Page Load Overview

80.31s
Total Load Time
68.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:6,652 chars
Detector Agreement:75%

Website Classification

Primary Category

entertainment media45% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
45%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1577.222.61.195Russia
AS44112SpaceWeb Ltd
14188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1469.175.50.229United States
AS32475Internap Holding LLC
14172.67.134.199Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14142.251.154.119Google · CDNUnited States
AS15169Google LLC
14142.251.20.94Google · CDNUnited States
AS15169Google LLC
14142.251.153.120Google · CDNUnited States
AS15169Google LLC
14142.250.154.95Google · CDNUnited States
AS15169Google LLC
14142.251.153.7Google · CDNUnited States
AS15169Google LLC
14142.251.14.95Google · CDNUnited States
AS15169Google LLC
63145--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C824B7607B921825215F13EFE053760C14DADEF7F64EA6F5F4BA806881F0FD276A2219

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:axXQNlL7eavBjbTFXWJlgakgUI9yIuEIR+Walak31c9FS21+AUGdb36HMtw:sXibvBjbTFXWJl93UI9yIuEIR+WaJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:220408:YS0uBRLcAwGklQgMgsSQFLXAwIlS4eAAIzvUBwgBAEkCCAAMSMDKACopkVRBMFI+SOAbTIpQoIcKVColuIdAQDexGAULICFS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff40949c84949c3f
Perceptual Hash:d6e1a9fa898982b6
Difference Hash:998cac74142c3029
Wavelet Hash:ffc4149c84949c3f
Color Hash:#61d22d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data