Security Scan Report: druzhniy-center.ru

Site favicon
Submitted: Sep 29, 2026, 12:31:22 PMCompleted: Sep 29, 2026, 12:32:15 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Established 4-year-old Russian nature-encyclopedia site with legitimate self-branded content and no credential/payment forms or threat-intel hits. Elevated by an excessive cross-domain redirect chain and ad/tracking scripts, but no concrete phishing or malware evidence.

Risk Factors (3)
Excessive redirect chain (32 redirects, 31 cross-domain) consistent with aggressive ad/malvertising funnels
Unranked third-party script host mrdrop.ru serving JavaScript to the page
Cross-origin POST to ip.mehanoid.pro — unclear purpose
Safety Factors (5)
Domain registered 2022-01-10, operating over 4 years
Self-branded educational content, no brand impersonation
No passwords, credential, or payment fields collected (0 password, 0 payment fields)
No Indicators of Compromise, no YARA malware patterns, no IDS/Suricata alerts, no known phishing kits
Most third-party script hosts (7 of 8) are ranked in the top-1M
Domain age information unavailable

Details

Page Title

Дружный центр - мир природы

Scan Type

public

Domain Name Analysis

The domain 'druzhniy-center.ru' uses the Russian country-code top-level domain (.ru). Count 15 characters in 'druzhniy-center' holding 4 vowels versus 10 consonants; bonus characters include 1 hyphen. It segments into five words: d, ruz, hn, iy, center. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://druzhniy-center.ru

Page Load Overview

13.26s
Total Load Time
7.7 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:17,627 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning42% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
42%
corporate
35%
blog personal website
30%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3489.169.42.183Russia
AS29182JSC IOT
331.129.109.116St Petersburg, St.-Petersburg, Russia
AS198610Beget LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
390.156.170.209Russia
AS198610Beget LLC
3155.212.203.195Moscow, Moscow, Russia
AS47764LLC VK
3185.31.113.248Germany
AS57363CDNvideo LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
377.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
377.223.120.36Moscow, Moscow, Russia
AS50340JSC Selectel
19655--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T197744AB161D5287B1157A0C1E575BF0DB4F9407BEE4A4922B2BC4DB86FC2EF28923748

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:kfDBa2gGISjHk3WkLDD44ofwZTXF3ft17CKgs9Yf/OO:kdjIiwLDD44MK2/OO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:338961:AGTBogjCWCCgsBOzC4A+cBGJIIZCDCShWhQJPcIKRwGAUBQQQAAaigCgXBIyQKIZhARJoLgwcARIAsQRBCABQDElRgcafQFi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff81818181ffff
Perceptual Hash:ac6c92196dc66c79
Difference Hash:bc3927272313c0bc
Wavelet Hash:df1f81000101ffff
Color Hash:#405bbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data