Security Scan Report: rkme.ru

Redirected to:
http://rkme.ru/
Submitted: Completed: publiccompleted
This website contacted 52 IPs in 3 countries across 15 domains to perform 178 HTTP transactions. The main domain is rkme.ru and was registered 13 years ago.

Submitted URL: https://rkme.ru

Effective URL:
http://rkme.ru/
Redirected

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

13-year-old Russian movie/game blog with only search forms, but its primary domain carries a single-source, unverified 'strelastealer' malware report not corroborated by hunting rule, IDS or page behaviour; possible compromise.

Risk Factors (1)
Primary domain matched a single-source, unverified 'strelastealer' malware indicator — possibly a past/transient compromise of this blog rather than malicious intent, but unresolved
Domain age information unavailable

Details

Page Title

RKME.ru | Уютный рекомендательный бложик

Scan Type

public

Domain Name Analysis

You're looking at domain 'rkme.ru' on the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'rkme' spans 4 characters split between one vowel and 3 consonants. Tokenizing the label suggests 2 words: rk, me. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rkme.ru

Page Load Overview

9.01s
Total Load Time
9.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:72%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:51,984 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as ru

Website Classification

Primary Category

news/blog40% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2577.222.40.184Russia
AS44112SpaceWeb Ltd
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3216.104.36.156United States
AS32475Internap Holding LLC
313.33.52.208Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
318.172.112.56Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
32.21.110.197Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
334.225.162.85Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
344.215.137.166Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
344.199.181.5Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
3146.75.121.16Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
17852--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B7E3206841DE149F0201F24BE5187E0CF9EB45FE7BAE975623956CBE35F2424C238B1A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:NGqDu0SGbnk3b8497P8U7z5uEZFNMu/mjlq9s1ifwMKSc58Zs9IFl4yaF2fcWS22:czT8yThZuEZFNMu/ElqCsfwMKSyL6FCr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154744:R4A0oQAACRihQAlASVmBEUABiucBIEFSJCDJIA0KGXzWAAcPWRSJFQsIRAAhJqJUlIpXwVcHIIcAY0IeglIwQoEYpIJyAiEC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:077f7f7f7f7f7f7f
Perceptual Hash:803e363e3e363636
Difference Hash:ccc0ccd8d8c8ccd8
Wavelet Hash:037f075f0f07070f
Color Hash:#97bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data