Security Scan: Personal area

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a92a0b8a-5fce-449b-b01d-742542920bc5 Domain and IP registration (RDAP)/api/v1/rdap/a92a0b8a-5fce-449b-b01d-742542920bc5 Certificate Transparency/api/v1/ct/auth.mosmetro.ru How often this domain was scanned/api/v1/domain/stats/auth.mosmetro.ru Scan history for this domain/api/v1/domain/history/auth.mosmetro.ru?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 12 HTTP transactions. The main domain is auth.mosmetro.ru and was registered 26 years ago.

Submitted URL: https://auth.mosmetro.ru

Effective URL:

https://auth.mosmetro.ru/signin

Redirected

The Cisco Umbrella rank of the primary domain is #153,357 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

Risk Score

Official Moscow Metro passenger sign-in (auth.mosmetro.ru) on a 26-year-old domain; passwordless phone/SMS login, same-origin, no forms collecting passwords, no threat-intel, YARA or IDS hits. Legitimate.

Safety Factors (4)

Established 26-year-old domain belonging to the operator of the Moscow Metro network

Self-branding on its own official domain, not impersonation of another entity

Same-origin passwordless login form with no credential exfiltration

Clean threat intelligence, YARA, IDS and kit-roster results

Domain age information unavailable

Details

Page Title

Personal area

Scan Type

public

Favicon Hash

MMH3: 964044384

MD5: fc496c749c799f0c52a03b34d1bb7292

Domain Name Analysis

You're looking at domain 'auth.mosmetro.ru' on the Russian country-code top-level domain (.ru); it also runs on subdomain 'auth'. The registrable portion 'mosmetro' spans 8 characters holding 3 vowels versus 5 consonants. Splitting it apart reveals two words: mos, metro. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.32s

Total Load Time

469 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:63%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:71 chars

Detector Agreement:100%

Language mismatch: Declared as ru but detected as en

Website Classification

Primary Category

news media journalism34% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

34%

healthcare medical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	178.178.127.20	Gukovo, Rostov Oblast, Russia	AS31133PJSC MegaFon
12	1	-	-

Detected Technologies1

HSTS

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E6D29BB24750A4BC52CACC4E07B2790F56E4D9B1C68F8ECC5DA2D56AEAC67AF50C03C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:XBnZQfcW/sIdsFoVVassekxi16kuBEhsesWjVr78XSXLl8Jioeto2np:YWIWAXnp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28566:ik2ABJQJCTDAPSUEAiIjSDBbQDIBgcFGRFmAmABAIACAhkhAIDQ5YUB5YhBEOaC8LMNAiGREpRDeAAWiFlBAgBrmiAhFBATw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c7c7f3ffffffff

Perceptual Hash:e6229b99cccc9999

Difference Hash:080c0c2400000000

Wavelet Hash:07030333f0f0f0f0

Color Hash:#4e2dd2

Other Hashes

Crop Resistant:080c0c2400000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: auth.mosmetro.ru