Security Scan Report: stalkermod.ru

Site favicon
Submitted: Oct 13, 2026, 6:01:52 PMCompleted: Oct 13, 2026, 6:03:48 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Established, self-branded Russian S.T.A.L.K.E.R. mods fan portal. No impersonation, no Indicators of Compromise, no malware. Only signals are ad-heavy redirects and tracker scripts — low risk.

Risk Factors (2)
Unusually long redirect chain (47 redirects, 39 cross-domain) consistent with ad-network interstitials
Ad/tracking scripts contacting adnitro.pro, sync.bumlam.com, uid.bumlam.com, geoip.xoalt.com
Safety Factors (6)
Established domain (nearly 3 years old)
Site displays its own brand, matching its domain — no brand impersonation
No Indicators of Compromise, no YARA matches, no malicious kit roster entries
Content is a genuine S.T.A.L.K.E.R. mods fan/download portal with rich, coherent editorial content (news, guides, forum, reviews)
Login form is first-party and same-origin; no payment or disguised credential fields
9 third-party script hosts, all ranked in Cisco Umbrella top-1M
Domain age information unavailable

Details

Page Title

Скачать моды на Сталкер — Stalkermod.ru | Моды Stalker

Scan Type

public

Domain Name Analysis

Domain 'stalkermod.ru' uses the Russian country-code top-level domain (.ru). The registrable portion 'stalkermod' spans 10 characters split between three vowels and 7 consonants. Breaking it apart gives two words: stalker, mod. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stalkermod.ru

Page Load Overview

75.16s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-ru
Text Length:7,463 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media89% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
89%
documentation technical
82%
technology software
68%
forum community discussion
58%
news media journalism
37%

Detected Features

Login Form
Search
Comments
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1891.222.238.64St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
277.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
281.200.127.11Russia
AS202173MaximaTelecom JSC
292.63.110.59Russia
AS29182JSC IOT
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
288.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
279.98.186.40Moscow, Moscow, Russia
AS50340JSC Selectel
2195.209.86.158Russia
AS34879OOO Sovremennye setevye tekhnologii
2151.236.94.125Russia
AS57363CDNvideo LLC
237.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
20293--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B642B38C290323D950383F5D6307668B98B916FDE575B01B2FD43B09BA2FC85E6A59C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:26hG80JRgJHVTzhuCKfuCTrU5JE8mJRgJH+TzaudJtguDLJByiuuoRk3tDu8C8jw:26+3OD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:320859:BPUoFpilUaBAQ3MFVIRxApBIEEOgscLTAKAGYQFI7M7B8CwEoCAJKcAoSRzFmCEIRhAyBSAAHADqUSywSSNIAIBmiuAIw0Qi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c01253705210503
Perceptual Hash:82cfd9499696e538
Difference Hash:f92b4d4d29474d3d
Wavelet Hash:3c81a7b785b18787
Color Hash:#79c1d2

Scan History

Scan history not available

Unable to load historical scan data