Security Scan Report: pogoda.ngs.ru

Site favicon
Submitted: Aug 23, 2026, 11:01:10 AMCompleted: Aug 23, 2026, 11:03:00 AMpubliccompleted

Summary

This website contacted 8 IPs in 2 countries across 23 domains to perform 2 HTTP transactions. The main domain is pogoda.ngs.ru and was registered 9 years ago.

Submitted URL: https://pogoda.ngs.ru/

The Cisco Umbrella rank of the primary domain is #146,765 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

The site shows no credential or payment collection and no brand impersonation, but a known malicious IP and low ranking raise moderate concerns.

Risk Factors
Known malicious IP associated with the host
Low domain ranking for a site claiming a reputable service (weather)
High JavaScript obfuscation score
Safety Factors
Long‑standing domain (registered 1999)
No forms collecting credentials or payments
Content appears to be a standard weather forecast page
No malicious YARA detections or credential exfiltration
Domain age information unavailable

Details

Page Title

Погода в Новосибирске на 3-10 дней, подробный прогноз | НГС.ру

Scan Type

public

Language

🇷🇺

Russian

(80% confidence)

Category

real estate property

(89%)

Domain Information

Domain 'pogoda.ngs.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'pogoda'. Its registrable label 'ngs' stretches across 3 characters containing zero vowels alongside 3 consonants. It segments into 1 word: ngs. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pogoda.ngs.ru/

Page Load Overview

7.50s
Total Load Time
142
HTTP Requests
23
Domains
2.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:80%
Script Type:Cyrillic
HTML Lang Attribute:ru
Text Length:9,532 chars
Detector Agreement:80%

Website Classification

Primary Category

real estate property89% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
89%
adult content
53%
news media journalism
40%
forum community discussion
37%
blog personal website
33%

Detected Features

Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23178.176.128.128Russia
AS31133PJSC MegaFon
1787.250.251.134Russia
AS13238YANDEX LLC
1788.212.201.204Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
17142.251.151.119Google · CDNUnited States
AS15169Google LLC
17195.19.220.34Russia
AS44310Internet Technologies LLC
17185.40.155.13Russia
AS21030Cluster LLC
17192.178.183.97Google · CDNUnited States
AS15169Google LLC
1777.88.55.88Russia
AS13238YANDEX LLC
1428--

Page Statistics

142
Requests
23
Unique Domains
3.6 MB
Total Size

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D84131B7ACD8D49B02045597ECF5B428ADA2625BA25FE490F4DC00AA2FC4F954957848

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Pg6iT9Op+M+fRz4TR/MHIRcc5xltx6vIduzlZlnBh6:PgVTblpz4TR/4IRVV6vIdqZl6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2433:AAAAAAACAAYCAAEQAgEAAgCdkEAAAAEUAAgEEBAIBAA4BBAAgoAAAAAAsIJgBAgAAAAAIAAABIAAAAAABAAMBAACIICCAAwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffbfffffffff3f
Perceptual Hash:ae7a2a6a2a7a2a3a
Difference Hash:33e87970f4a09cf4
Wavelet Hash:003e1c7e3e7e063e
Color Hash:#e06c8d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data