Security Scan Report: fotokto.ru

Site favicon
Submitted: Oct 5, 2026, 11:51:18 AMCompleted: Oct 5, 2026, 11:53:21 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Self-branded Russian photography social network (ФотоКто) on an unranked ~229-day-old domain. Own login/registration forms, no impersonation, no threat-intel, YARA or IDS hits; only an unusually long cross-domain redirect chain.

Risk Factors (2)
14 redirects detected, 12 of them cross-domain, which is unusually high for a single landing page
Domain is not ranked in Cisco Umbrella top 1M and shows few business-legitimacy signals
Safety Factors (6)
Brand shown (ФотоКто) matches its own domain — self-branding, not brand impersonation
All login/registration forms post to same-origin paths on fotokto.ru
No credential exfiltration or cross-origin credential submission detected
No Indicators of Compromise, no JavaScript malware (YARA), no IDS alerts, no malicious kit in roster
Rich, coherent community content (blogs, contests, forums, events, ~230k registered users) consistent with a photography social network
Cookie/Яндекс.Метрика notice and privacy-policy reference are normal for a Russian site
Domain age information unavailable

Details

Page Title

ФотоКто – социальная сеть о фотографии, фото сайт фотографов, фотографии онлайн

Scan Type

public

Domain Name Analysis

Domain 'fotokto.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. Its registrable label 'fotokto' stretches across 7 characters with three vowels and four consonants. Word splitting yields 3 words: foto, k, to. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fotokto.ru

Page Load Overview

80.14s
Total Load Time
15.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:9,657 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network100% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
100%
blog personal website
100%
forum community discussion
99%
download file sharing
94%
education learning
94%

Detected Features

Login Form
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23149.154.67.5Russia
AS29182JSC IOT
11188.120.224.191Russia
AS29182JSC IOT
11178.248.233.148Russia
AS51115HLL LLC
1187.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1187.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1189.248.230.8Russia
AS207353Ruform LLC
11142.251.14.97Google · CDNUnited States
AS15169Google LLC
115.188.105.100Russia
AS199860Atomdata Jsc
1177.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
11109.238.90.239Russia
AS201706Servicepipe LLC
23220--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B7733370008950BF164B58CAF8206B4EB9E397BEDED74B0167F85B6B7BD3D64CA18106

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:pGECkPzkO/VSKNXtgWaGOGjGgGBwFi4kb13:8ECkPzkXKN9gWTFi4k5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:79890:QwHITQQgFAvGAhqgFNkAc0jLwOMHTAFNA4DCFM0MoAKihojICDQctlMhAaIkikSgmAY7GGiQDCYiiJoI5Ch2iOckQCkwAISE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000c0004ffffff
Perceptual Hash:9313ecec4c73f109
Difference Hash:714d594d7d000765
Wavelet Hash:00040c041dffffff
Color Hash:#d0e06c

Scan History

Scan history not available

Unable to load historical scan data