Security Scan Report: fotoload.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 3 countries across 14 domains to perform 107 HTTP transactions. The main domain is fotoload.ru and was registered 8 years ago.

Submitted URL: https://fotoload.ru

The Cisco Umbrella rank of the primary domain is #572,791 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Established 8-year-old Russian photo-hosting community with its own same-origin login/registration. No impersonation, no credential exfiltration, no threat-intel or malware signals; only minor redirect and eval() noise.

Risk Factors (2)
Excessive redirect chain: 5 redirects, all cross-domain
5 eval() calls in page scripts (common in JS frameworks/bundlers, no other corroborating evidence)
Safety Factors (5)
8+ year old established domain
Site displays only its own brand, no impersonation of a different entity
No credential or payment exfiltration; all forms are same-origin on the site's own domain
Clean threat intelligence, YARA and IDS results
Consistent site identity across title, meta description, footer and internal links
Domain age information unavailable

Details

Page Title

Fotoload - это сообщество фотографов и творческих людей. Фотохостинг ru

Scan Type

public

Domain Name Analysis

You're looking at domain 'fotoload.ru' on the Russian country-code top-level domain (.ru) while skipping any subdomain. Its registrable label 'fotoload' stretches across 8 characters containing 4 vowels alongside 4 consonants. Splitting it apart reveals 2 words: foto, load. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fotoload.ru

Page Load Overview

75.14s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:70%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:23,770 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing25% confidence
Type: spa
Method: ml+structural

All Detected Categories

download file sharing
25%
forum
25%
social_media
20%

Detected Features

Login Form
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
155.9.84.163Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
4142.251.110.154Google · CDNUnited States
AS15169Google LLC
487.240.132.72Russia
AS47541LLC VK
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
477.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
4104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
488.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4193.3.184.137Russia
AS50214QWARTA LLC
10724--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15864D935F4F5C1B31A57A09ED956F60AEF21210FAD41CD0CF76C08A9BF82B65CA521C6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:8fdzSRqHbIIIIg9U1Dc7PyYTfAh0DKWTV2SJd+wPRpODtCw/8K2:qeUS7PyYT/TZdVPRsDtCww

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:336749:BAQElFOAIQSAmRUhCCWLxNRQJ9wGhCARkBawYAfQBDSAAQgAgRHaKgMYQgU+EgFoKgPBqo9jCwoIAEijgAEIAGAqQgAKWqmh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data