ScanMalware.com

Security Scan Report: 116.ru

Site favicon
Submitted: Oct 2, 2026, 3:10:56 PMCompleted: Oct 2, 2026, 3:13:04 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/80f379a4-ffe1-4007-89a6-4a6d4f5b24acDomain and IP registration (RDAP)/api/v1/rdap/80f379a4-ffe1-4007-89a6-4a6d4f5b24acCertificate Transparency/api/v1/ct/116.ruHow often this domain was scanned/api/v1/domain/stats/116.ruScan history for this domain/api/v1/domain/history/116.ru?limit=15

This website contacted 139 IPs in 7 countries across 92 domains to perform 1250 HTTP transactions. The main domain is 116.ru and was registered 2 years 9 months ago.

Submitted URL: https://116.ru

The Cisco Umbrella rank of the primary domain is #537,791 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

116.ru is an established regional Russian news site displaying its own brand, with no forms, no credential/payment collection, no Indicators of Compromise, YARA or Safe Browsing hits. Only ad-heavy redirects and INFO-level IDS noise; low risk.

Risk Factors (3)
Excessive redirect chain (50 hops, 42 cross-domain) is an ad-monetization artifact that adds noise and minor latency/opacity risk
Heavy third-party tracking/ad consent stack (TCF vendor list, dozens of ad-tech domains) trades user data for ad revenue
ML classifier flags adult content at 95% confidence, which conflicts with the visible regional-news content and is treated as low-signal
Safety Factors (6)
Domain age 1014 days, well-established (risk multiplier normal)
Page presents its own brand (116.ру) on its own matching domain — no typosquatting or brand impersonation
No forms of any kind: no login, no password, no payment, no email capture
Business legitimacy indicators present: operating 2+ years, physical address visible, business entity mentioned
No Indicators of Compromise, no YARA malware, no credential exfiltration, no cross-origin form submissions
All network IDS alerts are informational only and not corroborated by any content evidence
Domain age information unavailable

Details

Page Title

Новости Казани и Республики Татарстан | 116.ру

Scan Type

public

Domain Name Analysis

The domain '116.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Count 3 characters in '116' holding 0 vowels versus zero consonants, along with three digits. Splitting it apart reveals 1 word: 116. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://116.ru

Page Load Overview

80.09s
Total Load Time
15.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:79,560 chars
Detector Agreement:60%

Website Classification

Primary Category

adult content95% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
95%
real estate property
47%
corporate
25%
forum
20%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
146195.19.220.26Russia
AS44310Internet Technologies LLC
8185.40.155.13Russia
AS21030Cluster LLC
887.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
888.212.201.204Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
877.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
8178.176.128.203Russia
AS31133PJSC MegaFon
8212.193.152.61Russia
AS204878OOO Sovremennye setevye tekhnologii
877.223.124.18Moscow, Moscow, Russia
AS50340JSC Selectel
8151.236.71.248Germany
AS204720Global Cloud Network LLC
8155.212.203.195Moscow, Moscow, Russia
AS47764LLC VK
1250139--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110351A32B900313FA73F84C4EA69AF0E71D6622FF99E4451C8E5076C46F6DB8682D257

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:KkETXPjV1vdjShZc+XPb3AbyQX+uIB2P5sWWZ821tI84Erf9c3gIttLFj4dL:KkaXPjV1vdjShZc+XPb3AbyQX+uIB2Pm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1142678:gCoB8OomxgKI0CYTAEsgwAYYMZRgGb6oEEwgECIEQhBAZOEAkggQBjCVHGBBQMGAQkci7AYkGAFxMuzVTQjFALFLNhAGBQAF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000018ffffffcfcf
Perceptual Hash:994e3364b1b3cc4b
Difference Hash:0cb2b2b2b2b2989c
Wavelet Hash:0000187e7e5ecec6
Color Hash:#931f4e

Other Hashes

Crop Resistant:96868ab6a2aab633,0cb2b2b2b2b2989c

Scan History

Scan history not available

Unable to load historical scan data