Security Scan Report: mehanik35.ru

Site favicon
Submitted: Sep 26, 2026, 12:27:25 AMCompleted: Sep 26, 2026, 12:28:15 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Well-aged metalworking site repurposed for off-topic alcohol-treatment SEO spam with a 30-hop cross-domain redirect chain. No credential harvesting, malware, impersonation, or threat-intel hits; low-grade spam risk only.

Risk Factors
Mass-published off-topic medical/alcohol-treatment SEO spam on an unrelated metalworking domain
Excessive cross-domain redirect chain (30 hops)
Heavy third-party ad/SSP network integration with obfuscated inline script APIs
Safety Factors
Domain is well-established (~4 years old, registered 2022)
No credential, password, or payment fields present
No Indicators of Compromise, YARA, or network IDS detections
Page displays its own brand ('Механика металла'), not another entity's brand
Domain age information unavailable

Details

Page Title

Механика металла

Scan Type

public

Domain Name Analysis

The domain 'mehanik35.ru' uses the Russian country-code top-level domain (.ru) without a subdomain. The registrable portion 'mehanik35' spans 9 characters with three vowels and 4 consonants, plus two digits. Splitting it apart reveals 4 words: meh, a, nik, 35. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mehanik35.ru

Page Load Overview

12.66s
Total Load Time
11.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:9,509 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical57% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
57%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1089.169.42.183Russia
AS29182JSC IOT
331.129.109.116St Petersburg, St.-Petersburg, Russia
AS198610Beget LLC
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
390.156.170.209Russia
AS198610Beget LLC
3155.212.203.195Moscow, Moscow, Russia
AS47764LLC VK
3151.236.71.248Germany
AS204720Global Cloud Network LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
377.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3185.31.113.248Germany
AS57363CDNvideo LLC
390.156.232.15Russia
AS47764LLC VK
15449--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CAF36CB1A09834B72182A6DAD599BB1C7469442FDE430A15B5BC79BC3FE1FD28133B0D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:R39ypKK/A+tjlEzAS65UDE1JqYhnJT3B+dDWx34Bp/vuiQBDdgosEyoXu3Yvj03G:JYMKBmey8qYcdKxLBz7gxM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:171543:CBgDwEIMEOEEfITwLgUBQAUwHhZQEWgHBMEQlSAuwMYqCQCsyUFkwcRsIIBa5RokCrMAoQIHhA8kJoGlnSDbAfgoYQwSAoCI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3ff8181dbfbcf
Perceptual Hash:e936926d3cc3922d
Difference Hash:1e1307232333939a
Wavelet Hash:c781c38181dbebcb
Color Hash:#d29a79

Scan History

Scan history not available

Unable to load historical scan data