Security Scan Report: kto-chto-gde.ru

Site favicon
Submitted: Oct 4, 2026, 12:20:48 PMCompleted: Oct 4, 2026, 12:23:07 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 65%

4
Risk Score

Established 5-year-old Russian lifestyle magazine with no credential or payment forms and no impersonation. Copy is editorial. Only concerns are one unverified single-source 'magentocore' threat-intel tag on a third-party resource and a long cross-domain ad redirect chain; no scanner-confirmed malware or phishing.

Risk Factors (2)
Single-source, unverified threat-intel report tagging a third-party resource loaded by the page (sjsmartcontent.org, 'magentocore')
Unusually long cross-domain advertising redirect chain (39 redirects, 35 cross-domain) increases exposure to untrusted ad intermediaries
Safety Factors (5)
Domain is well established (2052 days, registered 2021-02-19)
No credential-harvesting or payment forms; all 3 forms are site search
No brand impersonation — site presents its own brand, og:type is article
No YARA malware, no IDS alerts, no JavaScript obfuscation or exfiltration signals
Content reads as ordinary editorial/lifestyle magazine material
Domain age information unavailable

Details

Page Title

КТО ЧТО ГДЕ — интересные факты, имена, праздники и советы

Scan Type

public

Domain Name Analysis

Domain 'kto-chto-gde.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. The core label 'kto-chto-gde' covers 12 characters with three vowels and 7 consonants, along with two hyphens. Tokenizing the label suggests six words: k, to, ch, to, g, de. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kto-chto-gde.ru

Page Load Overview

75.13s
Total Load Time
6.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:70%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:8,189 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business84% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
84%
education learning
84%
adult content
83%
finance banking
75%
government public service
70%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
52217.168.241.60Moscow, Moscow, Russia
AS50340JSC Selectel
2212.8.232.117Moscow, Moscow, Russia
AS61400Start2 LLC
2142.251.14.154Google · CDNUnited States
AS15169Google LLC
277.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
279.98.186.40Moscow, Moscow, Russia
AS50340JSC Selectel
2212.109.217.26Russia
AS29182JSC IOT
237.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
292.53.64.248Moscow, Moscow, Russia
AS49505JSC Selectel
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
283.222.28.39Russia
AS47764LLC VK
24095--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15A149633A0D5246B12139686D9217E1EB9A6803BDF5B0E54BAFC0A7DFFC6D924E1311C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+QayTmXA+H/N8Uq/RXdPIoydTCjsUxMcZHoHzxm0aGoqqYG4M2m1hDR:vy8Uq/RXd4TCjsUxv6naGobYgR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:205594:AgQICgDDHARBwJAkNFpqQIX5CsXmxiemEwwFQFoKEpZVvgdASIqANAIAKJMwgRoAvkQGZBMqJ0BYEBKAhikIgIAgYWSSEYQD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffe7e7ffffff
Perceptual Hash:f755dd55770088a8
Difference Hash:0000000c0c000000
Wavelet Hash:0e0e3e26061e3e3e
Color Hash:#e06c6c

Other Hashes

Crop Resistant:0000000c0c000000

Scan History

Scan history not available

Unable to load historical scan data