Security Scan Report: aif.by

Site favicon
Submitted: Jul 7, 2026, 3:52:54 PMCompleted: Jul 7, 2026, 3:55:22 PMpubliccompleted
Loading additional data...

Summary

This website contacted 28 IPs in 6 countries across 21 domains to perform 117 HTTP transactions. The main domain is aif.by and was registered NaN years ago.

Submitted URL: https://aif.by

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

The site shows typical news content, is old and clean, but has an attacker‑linked IP and many redirects, warranting moderate risk.

Risk Factors
Threat‑intel flagged IP associated with attacker activity
High number of redirects (12)
Unranked domain with no reputation
Safety Factors
Domain age 8456 days (well‑established)
No credential or payment collection forms
No malicious JavaScript or IDS alerts
Content classified as news media with no brand impersonation
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Аргументы и Факты в Беларуси: новости страны и мира

Scan Type

public

Language

🇷🇺

Russian

(85% confidence)

Category

news media journalism

(84%)

Domain Information

The domain 'aif.by' uses the Belarusian country-code top-level domain (.by). The registrable portion 'aif' spans 3 characters containing 2 vowels alongside one consonant. Segmentation suggests 2 words: a, if. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aif.by

Page Load Overview

75.15s
Total Load Time
117
HTTP Requests
21
Domains
3.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:85%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:85%
Script Type:Cyrillic
Text Length:9,532 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism84% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
84%
social media network
73%
documentation technical
67%
government public service
63%
finance banking
62%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
977.88.21.119Russia
AS13238YANDEX LLC
474.125.29.95Google · CDNUnited States
AS15169Google LLC
4185.15.175.148Russia
AS43226Data Storage Center JSC
488.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
4185.15.175.174Russia
AS43226Data Storage Center JSC
487.250.250.90Russia
AS13238YANDEX LLC
4213.180.193.90Russia
AS13238YANDEX LLC
4194.226.130.227Russia
AS52016JSC ADFACT
4213.180.204.90Russia
AS13238YANDEX LLC
4185.15.175.134Russia
AS43226Data Storage Center JSC
11728--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T171C3977158F4606F0313B4D1E9317B2EAD92853BBE466A0572BC0A847FE3FA5C91B21D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:56A9tqhIMIsRl1hlv9Nv9/Q9np4NFyNflv1J3JfDBVJnJ/wBtChuykUZ5+9nb8ls:8jlQ9np4Nq35FJcyZ6lb84/GQQWx6p0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:128872:sDGISiLsCUEmlS0wgGiBXEEMBFgYUDACCBQ2BQMARQSQUsoDxAkSCJPA2gKKxABzOIyWBfKkiEBuURRFTRMCDAp5IATBArKT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data