Security Scan Report: hotgeo.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 26 IPs in 4 countries across 14 domains to perform 85 HTTP transactions. The main domain is hotgeo.ru and was registered 13 years ago.

Submitted URL: https://hotgeo.ru

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Old self-branded Russian news site with no credential/payment forms or threat-intel hits. Only minor concerns are six cross-domain redirects and a low-confidence phishing classifier label.

Risk Factors (2)
Six cross-domain redirects detected
ML classifier returned a low-confidence phishing label (26%) alongside healthcare/news categories
Safety Factors (4)
Established 13-year-old domain
Self-branding matches the domain; no impersonation of another entity
No credential or payment forms; only standard search forms
No threat-intelligence, JavaScript malware, IDS, or cross-origin credential exfiltration findings
Domain age information unavailable

Details

Page Title

HotGEO

Scan Type

public

Domain Name Analysis

Domain 'hotgeo.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'hotgeo' is 6 characters long split between 3 vowels and three consonants. Splitting it apart reveals two words: hot, geo. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hotgeo.ru

Page Load Overview

85.11s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,872 chars
Detector Agreement:67%
Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

healthcare medical48% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
48%
phishing scam
26%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10176.99.4.35Russia
AS49352Domain names registrar REG.RU, Ltd
337.19.194.80Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
3142.250.154.154Google · CDNUnited States
AS15169Google LLC
395.213.175.72St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
3203.171.25.60Hanoi, Hanoi, Vietnam
AS45903CMC Telecom Infrastructure Company
3151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3142.251.13.138Google · CDNUnited States
AS15169Google LLC
8526--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D303617298F021670122A1CAE9506B0D7EA3C57FEE9B6A0571FC0F992FD3D42CD1B919

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:csBQCBv6Ud2ruKyLw3BrOcF87asUs4T7HGFp1w3VKZf5iiFG6:cKQCBv6UkruKyLw3BrOca7aZs4T7mFpn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40631:KHcAAeMqcKAIAU4MAQDMolAhDJJg5YAAwMtQCCZoRHGEAUNIkAQIYqQQzKkQgolyQbDAAPyLEBBGAYLGBOjAIQaIGAIAmEAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8240dfc3c3c3f3ff
Perceptual Hash:b838c73139ce9cb8
Difference Hash:329e361616160606
Wavelet Hash:c200d3c3c3c3f3f3
Color Hash:#6ce0b1

Other Hashes

Crop Resistant:329e361616160606

Scan History

Scan history not available

Unable to load historical scan data