Security Scan Report: metod-kopilka.ru

Redirected to:
https://infourok.ru/biblioteka
Site favicon
Submitted: Sep 27, 2026, 3:49:11 AMCompleted: Sep 27, 2026, 3:50:24 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Redirect from metod-kopilka.ru lands on Инфоурок's own teacher-materials marketplace. Self-branded, same-origin login only, no phishing or malware content — the lone threat-intel tag is a generic reputation hit on an unrelated third-party CDN IP.

Risk Factors (1)
One unverified single-source generic abuse-reputation tag on a third-party sub-resource IP (no content evidence)
Safety Factors (5)
Self-branded page matching its final domain (Инфоурок / infourok.ru), not impersonating another entity
Only credential form is the site's own same-origin login posting to /site/ajaxLogin; no payment fields, no disguised password fields
Cross-origin analyser classifies the form post as a legitimate SSO flow, not credential exfiltration
No Safe Browsing, IDS, YARA high-precision or known-kit hits
Rich legitimate operator content: educational licences, trademark certificate, copyright footer, named content authors
Domain age information unavailable

Details

Page Title

Библиотека материалов для учителей от ООО «Инфоурок»

Scan Type

public

Domain Name Analysis

Domain 'metod-kopilka.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Its registrable label 'metod-kopilka' stretches across 13 characters split between five vowels and 7 consonants, notching 1 hyphen. Splitting it apart reveals four words: me, tod, kop, ilka. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metod-kopilka.ru

Page Load Overview

8.29s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:22,089 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning97% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
97%
corporate business
80%
technology software
80%
documentation technical
64%
government public service
58%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23178.248.232.117Russia
AS51115HLL LLC
851.250.0.199Russia
AS200350Yandex.Cloud LLC
8188.72.103.4Dubai, Dubai, United Arab Emirates
AS215013Yandex.Cloud LLC
877.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
8213.155.159.188Belgium
AS1299Arelion Sweden AB
8178.248.237.144Russia
AS51115HLL LLC
884.252.130.113Russia
AS200350Yandex.Cloud LLC
8142.251.14.97Google · CDNUnited States
AS15169Google LLC
887.240.132.72Russia
AS47541LLC VK
837.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
19923--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B3940A6191B4015F02C7C9CDFE32B6247A2591AFFA4B81E1B5AC56B82FC7CD4E52781C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:abor+jJL8g6K6ycI16Z6Q6q+Di4DkKaHlbc:abM+jJwCcIDDkKaHNc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:430874:30EmNdIJT4AYQiCoAHNYRLECIjRBQMAhAgNSC2YihE1ELgASIECMUpArtBADtZCoJQAUPFzEhrwDDCoGANYQYQBQSAjiIIwg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8999f99fdfdbf9f9
Perceptual Hash:893e6b25962df0e1
Difference Hash:3b3bd33230923311
Wavelet Hash:8988f99b1f1b1918
Color Hash:#b487c5

Other Hashes

Crop Resistant:3b3bd33230923311

Scan History

Scan history not available

Unable to load historical scan data