ScanMalware.com

Security Scan Report: zolotoe-runo-sl.ru

Site favicon
Submitted: Sep 30, 2026, 6:32:30 AMCompleted: Sep 30, 2026, 6:33:30 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 50%

4
Risk Score

Established Russian content blog about gold/fashion with no credential or payment forms and no brand impersonation. Only concern is a single-source, unverified 'wp inject' tag on third-party resource a11ybar.com plus one unranked script host — weak signal, warrants caution, not a scam verdict.

Risk Factors (2)
Third-party resource with a malicious 'wp inject' threat-intel tag loaded by the page (single-source, unverified)
Unranked third-party script host (qprskl.com) serving JavaScript
Safety Factors (5)
Domain operating for ~3 years (well-established)
No credential, password, or payment forms — only site search fields
No YARA JavaScript malware patterns detected
No credential exfiltration and no cross-origin credential forms detected
Page content is coherent, ordinary editorial material with no phishing or brand-impersonation elements
Domain age information unavailable

Details

Page Title

Золотое руно - Всё о золоте и его сплавах

Scan Type

public

Domain Name Analysis

The domain 'zolotoe-runo-sl.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'zolotoe-runo-sl' spans 15 characters with six vowels and seven consonants, along with two hyphens. Segmentation suggests 6 words: zo, lot, oe, run, o, sl. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zolotoe-runo-sl.ru

Page Load Overview

22.72s
Total Load Time
9.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:2,562 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
477.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4212.109.217.26Russia
AS29182JSC IOT
4142.132.202.70Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
4142.250.154.94Google · CDNUnited States
AS15169Google LLC
4172.67.136.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
437.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
487.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
519126--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19553C7B39808186E0363B1D9E224BD4DA142C01BCF554E5A67EC92ADF3C2ED6C5F729C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ijSSc1Sf51rXeA1hJaz+hu6rmhVOwCP6/kl0rRUmOuH0X2o:ijz55h6/kl0rO8o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62696:6GQEWjRCBw8HBwBqhASEUCIwSogAkgDiMvgAIdgFwBSwBAnolkIE6IhLAjE0JAC9AEKPjIrsAtDICDIghg8GDgsEUAQLSKAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c383dffb87cfc787
Perceptual Hash:bcc963c932c7c338
Difference Hash:2b3736263e3e2e2e
Wavelet Hash:83838bfb83cbc383
Color Hash:#77862d

Other Hashes

Crop Resistant:2b3736263e3e2e2e,0020008888800000,195d4e4e4e4b4ecc,7333373727a76161,69292b33b6b6b3b3

Scan History

Scan history not available

Unable to load historical scan data