ScanMalware.com

Security Scan Report: jockeypromo.ru

Site favicon
Submitted: Oct 4, 2026, 12:41:52 AMCompleted: Oct 4, 2026, 12:44:04 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Aged Russian DIY/blog site with ordinary content and no phishing or malware signals, but abnormal 132-hop redirect chain, a domain unrelated to its content, and heavy ad-tech monetisation warrant caution.

Risk Factors (3)
132 redirects (106 cross-domain) inconsistent with a simple content site
Site content unrelated to its domain name (possible repurposed/expired domain)
Ad/SEO article-farm content with paid placement offer
Safety Factors (5)
Domain age 1745 days (~4.8 years) — well established
Verified form facts: 0 password fields, 0 disguised-password fields, 0 payment fields; only two on-site search forms
No Indicators of Compromise on the page or its resources
No JavaScript YARA malware patterns and no known malicious kit in the kit roster
No network IDS alerts and no cross-origin credential exfiltration
Domain age information unavailable

Details

Page Title

Домашний дизайнер

Scan Type

public

Domain Name Analysis

The domain 'jockeypromo.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. The registrable portion 'jockeypromo' spans 11 characters split between four vowels and seven consonants. Breaking it apart gives 2 words: jockey, promo. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jockeypromo.ru

Page Load Overview

90.13s
Total Load Time
13.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:8,601 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical88% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
88%
blog personal website
37%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4489.169.42.183Russia
AS29182JSC IOT
231.129.109.116St Petersburg, St.-Petersburg, Russia
AS198610Beget LLC
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
290.156.170.209Russia
AS198610Beget LLC
2155.212.203.195Moscow, Moscow, Russia
AS47764LLC VK
2151.236.71.248Germany
AS204720Global Cloud Network LLC
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
277.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
277.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
316137--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160246BF5A6B6187B3927A071E27B7B4D79B9843BCA088435B2BD65286FC1DE0407770C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:wtZLB057CfuFAK91BGghCB76sNbXtnOvpjEDaFHuMaAyF2x1yGkgLDD44OqCf2JQ:ZYnCLDD44ofwZTXF3ft17CKgs9Yf/OA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:209456:ZoYwoFCFAL8QDEEACdIAIJCgAIhinwA4sKsWg+RpCaYEmMJECqFiDCIiNeIIEh4acHsCixAgSJwOIUKpCgA0JRgCABSEAQEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3e3c3800007c7cff
Perceptual Hash:c316969639c3ed31
Difference Hash:fce4c8ea8af0d0d8
Wavelet Hash:3e3c3c08007c7cff
Color Hash:#2dd298

Other Hashes

Crop Resistant:fce4c8ea8af0d0d8,65234931636d4a66,0030604080100600,2b636369e1b1b151,e8ec454c6c66f2e3

Scan History

Scan history not available

Unable to load historical scan data