ScanMalware.com

Security Scan Report: hotgeo.ru

Site favicon
Submitted: Oct 10, 2026, 10:50:14 PMCompleted: Oct 10, 2026, 10:51:20 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Aged Russian self-branded news/advertorial content farm. No credential/payment forms, no Indicators of Compromise, no malware. Only concern is heavy cross-domain redirect chains and low-quality clickbait content.

Risk Factors (3)
Excessive cross-domain redirect chain (6 redirects) typical of ad/traffic-monetization systems
Low-quality mixed news/advertorial content farm (loan and product promotions alongside news)
Unranked in Cisco Umbrella top 1M (weak prior)
Safety Factors (5)
Domain registered and operating ~2 years (2023-11-17)
Self-branding: title/meta 'HotGEO' matches the domain — no third-party brand impersonation
No credential, login, or payment forms (verified from DOM)
No Indicators of Compromise, no JavaScript malware, no network IDS alerts
No cross-origin credential submission or exfiltration
Domain age information unavailable

Details

Page Title

HotGEO

Scan Type

public

Domain Name Analysis

Domain 'hotgeo.ru' uses the Russian country-code top-level domain (.ru). Count 6 characters in 'hotgeo' containing 3 vowels alongside three consonants. Splitting it apart reveals 2 words: hot, geo. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hotgeo.ru

Page Load Overview

7.22s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,872 chars
Detector Agreement:67%
Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

healthcare medical48% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
48%
phishing scam
26%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33176.99.4.35Russia
AS49352Domain names registrar REG.RU, Ltd
2212.102.56.179Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2142.251.14.156Google · CDNUnited States
AS15169Google LLC
295.213.175.72St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
2203.171.25.60Hanoi, Hanoi, Vietnam
AS45903CMC Telecom Infrastructure Company
2151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.97Google · CDNUnited States
AS15169Google LLC
277.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
2142.250.154.138Google · CDNUnited States
AS15169Google LLC
9532--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC03517298F025670122A1CAE9506B0D7EE3857BEE8B6B0571FC0F992FD3D42CD1B919

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2sBQwBv6Ud2ruKyLw3BzO8F87asUs477HGFp1w3VxFG55in:2KQwBv6UkruKyLw3BzO8a7aZs477mFpU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:39912:JhAaCKqbgEYqXIAX4AEJKoDAgIoFJGAsF/9SWOYdQBBkAIih6AAB1IiAQhgFRS/kQpCByiSDTUwgNBAcNQMINDgCNwCDUkQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8240dfc3c3c3f3ff
Perceptual Hash:b838c73139ce9cb8
Difference Hash:329e361616160606
Wavelet Hash:c200d3c3c3c3f3f3
Color Hash:#6ce08b

Other Hashes

Crop Resistant:329e361616160606

Scan History

Scan history not available

Unable to load historical scan data