Security Scan Report: lk.emias.mos.ru

Redirected to:
https://login.mos.ru/sps/login/methods/password?bo=%2Fsps%2Foauth%2Fae...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 7 domains to perform 164 HTTP transactions. The main domain is mos.ru and was registered 29 years ago.

Submitted URL: https://lk.emias.mos.ru

Effective URL:
https://login.mos.ru/sps/login/methods/password?bo=%2Fsps%2Foauth%2Fae...
Redirected

The Cisco Umbrella rank of the primary domain is #65,710 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

Official Moscow government (mos.ru) EMS patient-portal login redirecting to a legitimate login.mos.ru SSO flow. Long-established domain, no threat intelligence or malware signals.

Safety Factors (5)
Well-established 29-year-old government domain (.mos.ru)
Official SSO redirect to login.mos.ru documented as legitimate in cross-origin analysis
Ranked in Cisco Umbrella top 100K
No credential exfiltration, no malicious scripts, no IoC/hunting rule/IDS hits
Government public service classification (67%)
Domain age information unavailable

Details

Page Title

Войти

Scan Type

public

Domain Name Analysis

Domain 'lk.emias.mos.ru' uses the Russian country-code top-level domain (.ru); it also runs on subdomain 'lk.emias'. Count 3 characters in 'mos' containing 1 vowel alongside two consonants. Word splitting yields 1 word: mos. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lk.emias.mos.ru

Page Load Overview

3.94s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,086 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service67% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
67%
technology software
45%
documentation technical
27%
healthcare medical
26%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2094.79.51.136Russia
AS8901GKU Mosgortelecom
1882.202.189.136Russia
AS209030AO Kaspersky Lab
18212.11.155.136Russia
AS8901GKU Mosgortelecom
1894.79.51.137Russia
AS8901GKU Mosgortelecom
18212.11.155.134Russia
AS8901GKU Mosgortelecom
1887.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1877.238.101.250Russia
AS199599Telecom-Birzha, LLC
1887.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1877.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1649--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B67329A0ADA65C2E211330E9D13A940DB19BE113E909DF54FEFC01AAEFD1D548933B78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:KVHZEPmpT29kKGRwwPxftu4ycLAcoJj6ms9LogowN9clNmeGpzsMAzbzQhrX+UQY:KVHZEPCru4ycLAJj6hRog0OeF4i4Xr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80438:AKoWKUBhQoiSAHAiJcEwgoMWGFYhoHtgbEIbEoE7kIgYE4AKFAQIlCZLAAyACkOVAAJhEBDaPABANHKA84SIJQHgRNgKYxQv

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1b1f91199b1f1f
Perceptual Hash:890e96976969b696
Difference Hash:f5f7f0333333f3f0
Wavelet Hash:171b1f111b191f1f
Color Hash:#b3d279

Other Hashes

Crop Resistant:f5f7f0333333f3f0

Scan History

Scan history not available

Unable to load historical scan data