Security Scan Report: meteogu.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 3 countries across 17 domains to perform 114 HTTP transactions. The main domain is meteogu.ru.

Submitted URL: https://meteogu.ru

The Cisco Umbrella rank of the primary domain is #712,940 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Established Russian weather site with no forms, no credential/payment collection, and no threat-intel hits. Only mild concern is a 6-hop cross-domain redirect chain and eval() usage — no evidence of phishing or malware.

Risk Factors (3)
Six cross-domain redirects plus a 'Verifying your browser...' interstitial (redirect/cloaking pattern worth watching)
Four eval() calls in JavaScript (dynamic code execution — common in ad tech but noteworthy)
ML classifier flagged 'adult content' at low confidence (40%) — likely ad/consent noise
Safety Factors (5)
Domain is ~2.85 years old (well-established, minimal risk category)
No credential, login, or payment forms present (verified from captured DOM)
No Indicators of Compromise, no YARA hits, no IDS alerts, no Safe Browsing flags
Content is coherent weather-forecast material with business/address legitimacy signals
No brand impersonation — site displays its own brand and merely compares itself to Gismeteo/Hydrometcenter
Domain age information unavailable

Details

Page Title

Погода в Москве. Точный Прогноз Погоды в Москве, Москва, Россия

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'meteogu.ru' is registered with no subdomain. The second-level label 'meteogu' is 7 characters long split between four vowels and 3 consonants. Word splitting yields 3 words: me, teo, gu. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://meteogu.ru

Page Load Overview

1.51s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:67,634 chars
Detector Agreement:60%

Website Classification

Primary Category

adult content40% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
40%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26141.105.67.93Moscow, Moscow, Russia
AS50867Hostkey B.v.
4142.251.13.157Google · CDNUnited States
AS15169Google LLC
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4142.251.13.154Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.110.101Google · CDNUnited States
AS15169Google LLC
477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
490.156.233.120Russia
AS47764LLC VK
4142.251.110.138Google · CDNUnited States
AS15169Google LLC
11423--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E651A7900D6260268E6740E727FB3149A064650774CFD548BF8EA7860FC1270CFB739D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TYWzBZqsrlECb+hlgk60A5JHTFehFb+ozZ5KHSO/FE6VT0jfUSyYfz+40j:TYUdrPb+lYz8hFBz3KHlKjfUSyYfzYj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2800:gKEJgCAgACQAhAAAAAIgAAIICgCACgAABEAAJoCAIGAQAAC0IAgggAAEAAEAAAEAAwgBIAISgABCAZBBQAAIAAABQAAAYAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b399cc263399cc66
Difference Hash:0000300c4c300000
Wavelet Hash:3f3f2f27040c0c0c
Color Hash:#2dd24e

Other Hashes

Crop Resistant:0000300c4c300000

Scan History

Scan history not available

Unable to load historical scan data