ScanMalware.com

Security Scan Report: services.gismeteo.ru

Redirected to:
https://www.gismeteo.ru/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/652a1f6b-9d45-48b8-8376-fa8eb8763f7fDomain and IP registration (RDAP)/api/v1/rdap/652a1f6b-9d45-48b8-8376-fa8eb8763f7fHow often this domain was scanned/api/v1/domain/stats/services.gismeteo.ruScan history for this domain/api/v1/domain/history/services.gismeteo.ru?limit=15
This website contacted 16 IPs in 6 countries across 33 domains to perform 187 HTTP transactions. The main domain is gismeteo.ru and was registered 25 years ago.

Submitted URL: https://services.gismeteo.ru

Effective URL:
https://www.gismeteo.ru/
Redirected

The Cisco Umbrella rank of the primary domain is #99,327 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

The site shows high JS obfuscation and an IP threat‑intel hit, but lacks forms or brand impersonation; overall moderate risk.

Risk Factors (3)
High JavaScript obfuscation score
Critical IDS alerts (though informational)
Threat‑intel IP match
Safety Factors (5)
Established domain age (≈25 years)
Domain rank within top 100 000
No credential or payment collection forms
No brand impersonation detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

GISMETEO: Погода в России, прогноз погоды на сегодня, завтра, 3 дня, выходные, неделю, 10 дней, 2 недели, месяц

Scan Type

public

Domain Name Analysis

You're looking at domain 'services.gismeteo.ru' on the Russian country-code top-level domain (.ru) and includes subdomain 'services'. Count 8 characters in 'gismeteo' with 4 vowels and 4 consonants. Splitting it apart reveals four words: g, is, me, teo. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Gismméteo: Tloroga’ : Hoot) KapTe Npivinosiccrvisi Temmepayes.e Bospyxa;?c Tha axtuenocte:, ‘Tapert wera ie ising Hynes PoCKitA Saag Seivopo ExarepimGypr : - KpacnGapice bionic?” Castapa <...

Page Load Overview

5.45s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:59,735 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical91% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
91%
corporate
25%
forum
20%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2237.157.2.14Denmark
AS198622Adform A/S
1193.158.134.158Russia
AS13238YANDEX LLC
11172.67.188.26United States
AS13335Cloudflare, Inc.
1189.149.193.97Netherlands
AS60781LeaseWeb Netherlands B.V.
11151.236.83.93Moscow, Moscow, Russia
AS57363CDNvideo LLC
1188.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
1151.38.120.206Hessen, Saxony-Anhalt, Germany
AS16276OVH SAS
11188.42.34.65Luxembourg
AS7979Servers.com, Inc.
11199.68.197.234Moscow, Moscow, Russia
AS48018Fornex Hosting S.L.
11142.250.154.156United States
AS15169Google LLC
18716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7042851B0E5342B034391F1D41A7A0AF616F6B7ED4B4D14B1BC8AF4AFA1EA9CC2725C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Mcaj9Rido5mHxFDoizTQj1zl2sE8B41EyTNHP168rzg+yeos7d:Mcaj9Rido5mHPDoizTQJ5a7gsoGd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:179940:GFAgCghZpABBONeQZRx2QCCMoREfDNCA6WgqJAKokAOAEwIKWoBi3FwuEgR4kOcgdQssDeOOIhBgQJQQkGgigCCcIE84/Nha

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0008fff9f9f981a3
Perceptual Hash:c950365836b0c7ef
Difference Hash:9cbad29ad2d35a6a
Wavelet Hash:008af8f8f9f98393
Color Hash:N/A

Other Hashes

Crop Resistant:9cbad29ad2d35a6a

Scan History

Scan history not available

Unable to load historical scan data