Security Scan Report: m.rp5.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 91 IPs in 7 countries across 68 domains to perform 193 HTTP transactions. The main domain is rp5.ru and was registered 22 years ago.

Submitted URL: https://m.rp5.ru/%D0%9F%D0%BE%D0%B3%D0%BE%D0%B4%D0%B0_%D0%B2%D0%BE_%D0%92%D0%BB%D0%B0%D0%B4%D0%B8%D0%B2%D0%BE%D1%81%D1%82%D0%BE%D0%BA%D0%B5

The Cisco Umbrella rank of the primary domain is #199,988 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Legitimate weather site (RP5) with 22-year-old domain, no phishing forms or malware, but excessive redirects through ad networks.

Risk Factors (1)
Excessive redirects (72 total, 60 cross-domain) via ad networks, potentially indicating ad fraud or malvertising
Safety Factors (4)
Well-established domain (22 years old)
Self-branding matches domain (RP5 weather service)
No credential/payment forms
No IoC/hunting rule/IDS hits
Domain age information unavailable

Details

Page Title

Погода во Владивостоке - РП5

Scan Type

public

Domain Name Analysis

The domain 'm.rp5.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'm'. The registrable portion 'rp5' spans 3 characters holding zero vowels versus two consonants; it also includes one digit. Segmentation suggests 2 words: rp, 5. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

ыы Владивосток = 21:49, четверг, 12 ноября O° 3 ощущается как 2° 3 часа назад на метеостанции было +5.8 °C, небольшая облачность, атмосферное давление в пределах нормы, очень высокая влажность (100...

Page Load Overview

2.81s
Total Load Time
962 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:3,459 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2677.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
18135.106.142.233Moscow, Moscow, Russia
AS50340JSC Selectel
14188.124.55.195Moscow, Moscow, Russia
AS49505JSC Selectel
13213.180.204.90Yandex · CLOUDRussia
AS13238YANDEX LLC
1037.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
587.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
277.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
287.250.247.183Yandex · CLOUDRussia
AS13238YANDEX LLC
2213.171.19.201Moscow, Moscow, Russia
AS56694LLC Smart Ape
19391--

Detected Technologies6

JQueryv3.2.1
100%
PHPv8.2.35
40%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T139637062A1F21566011380C2A9667F3EBEF9916FDB061A1472BC3BF91FC6CD29D1312D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FSSHdCbeFLlshxCHOaHzQK+h4fK/LOdKqc3s:WGshxCHOaHzQKxGt8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70917:aKkfQwBoCF0EkEWKiRaaQAtNEM4KECwCAAwAFuEoEKQCCvMwhpABCNUEGBACBoYEFAeITVfICdDCL4IKUACgASCBFBEtFAEW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81fd010101317870
Perceptual Hash:ca38c69e31ce31ce
Difference Hash:010145010965e3c1
Wavelet Hash:81ff0f0fc1117870
Color Hash:080000001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data