Security Scan Report: lk.emias.mos.ru

Redirected to:
https://login.mos.ru/sps/login/methods/password?bo=%2Fsps%2Foauth%2Fae...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 7 domains to perform 167 HTTP transactions. The main domain is mos.ru and was registered 29 years ago.

Submitted URL: https://lk.emias.mos.ru

Effective URL:
https://login.mos.ru/sps/login/methods/password?bo=%2Fsps%2Foauth%2Fae...
Redirected

The Cisco Umbrella rank of the primary domain is #65,710 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

Official Moscow government (EMIAS/mos.ru) patient-portal SSO login page on a 29-year-old domain; the cross-origin post to login.mos.ru is a legitimate OAuth flow, not credential phishing.

Safety Factors (4)
29-year-old established domain (1996) with strong Umbrella ranking
Official government public service (EMIAS / mos.ru) login page
Legitimate same-government SSO flow verified by cross-origin credential analysis
No IoC, hunting rule, IDS, phishing-kit or Safe Browsing findings
Domain age information unavailable

Details

Page Title

Войти

Scan Type

public

Domain Name Analysis

The domain name 'lk.emias.mos.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'lk.emias'. The second-level label 'mos' is 3 characters long holding 1 vowel versus 2 consonants. Splitting it apart reveals 1 word: mos. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lk.emias.mos.ru

Page Load Overview

4.47s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,086 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service67% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
67%
technology software
45%
documentation technical
27%
healthcare medical
26%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2794.79.51.135Russia
AS8901GKU Mosgortelecom
2082.202.189.136Russia
AS209030AO Kaspersky Lab
20212.11.155.136Russia
AS8901GKU Mosgortelecom
2077.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
20212.11.155.134Russia
AS8901GKU Mosgortelecom
2077.238.101.250Russia
AS199599Telecom-Birzha, LLC
2087.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2087.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1678--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F7328A0ADA65C2E211330E9D13A944DB19BE113E909DF54FEFC01AAEFD1D548933B78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+VHZ3PmpT29kKGRwwPxftu4ycL5poJjOCs9LogowN9clNmeGpzsMAzbzQhrX+UQ4:+VHZ3PCru4ycL5GjOlRog0OeF4i6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80467:wDSAe2RBNKHgMkELykJhzZREIiAoJAVWAR4AWEAAoMQgiEAkBJiCsEmQm6IgASINQTCFFMACCYBpAGeJA6FGgWUCVpSIDhgJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1b1f91199b1f1f
Perceptual Hash:890e96976969b696
Difference Hash:f5f7f0333333f3f0
Wavelet Hash:171b1f111b191f1f
Color Hash:#2dd285

Other Hashes

Crop Resistant:f5f7f0333333f3f0

Scan History

Scan history not available

Unable to load historical scan data