ScanMalware.com

Security Scan Report: paymob.ru

Site favicon
Submitted: Dec 25, 2025, 4:34:28 PMCompleted: Dec 25, 2025, 4:34:51 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 2 countries across 7 domains to perform 185 HTTP transactions. The main domain is paymob.ru.

Submitted URL: https://paymob.ru

The Cisco Umbrella rank of the primary domain is #870,602 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

High‑risk phishing page likely harvesting credentials

Risk Factors
Hidden password fields (credential harvesting technique)
Multiple password fields on a low‑reputation domain
Excessive redirects (6) indicating possible URL manipulation
Low Cisco Umbrella ranking suggests suspicious or untrusted site
Unknown/very recent domain age increases suspicion
Domain age information unavailable

Details

Page Title

paymob

Scan Type

public

Language

🇷🇺

Russian

(80% confidence)

Category

finance banking

(83%)

Domain Information

The domain name 'paymob.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'paymob' is 6 characters long containing 2 vowels alongside four consonants. Segmentation suggests 2 words: pay, mob. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://paymob.ru

Page Load Overview

5.40s
Total Load Time
176
HTTP Requests
7
Domains
16.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:80%
Script Type:Cyrillic
HTML Lang Attribute:ru
Text Length:15,259 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking83% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
83%
government public service
62%
e-commerce shopping
59%
technology software
57%
cryptocurrency blockchain
48%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
31142.250.185.202United States
AS33904Limited Liability Company Telcomnet
29142.250.185.99United States
AS15169GOOGLE
29217.174.185.218Moscow, Moscow, Russia
AS33904Limited Liability Company Telcomnet
29142.251.141.106United StatesUnknown
29142.250.186.106United StatesUnknown
2987.250.250.119Russia
AS13238YANDEX LLC
1766--

Detected Technologies4

X-UA-Compatible
100%
Modernizrv2.6.2.min
100%
JQueryv1.10.1
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11DB3F07592EB4827403381C1A8796F1939E792AEDAA70E023BFC17792FEDC95780750D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+NHClYl4L42JbV42V+6D/FP+vMW2MvLp50sm9K16rOkL2UtI3KN+LmkHyGI2Ai5:+NilYCU2FV42ok/FP42I

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:113943:kYeFyKkKibgSbOAhIEIAARDVTIxMIODAHNgFAGVAGImNgC4wYKICAQVRMAlBAQTjOhhTAiCOZCIDG4NDNZPwI9jYYoCEIBCg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000000ffff
Perceptual Hash:a444dc3bbbfc44a1
Difference Hash:3464e44f4fe33416
Wavelet Hash:ff3070010101ffff
Color Hash:#b4c587

Other Hashes

Crop Resistant:3464e44f4fe33416,b4d4a42c4ee4b4b4,3464c4a44f4f8fe3

Scan History

Scan history not available

Unable to load historical scan data