Security Scan Report: cdn.master-knives.ru

Site favicon
Submitted: Oct 3, 2026, 7:37:51 AMCompleted: Oct 3, 2026, 7:38:24 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Old (1998) domain shows only an opaque anti-bot 'KillBot' verification interstitial that POSTs to a threat-intel-flagged .ru host, with 6 cross-domain redirects. No forms, no YARA, no exfiltration — no confirmed scam, but avoid entering data here.

Risk Factors (4)
Opaque anti-bot/verification interstitial that hides the actual site content behind a wait screen
6 cross-domain redirects in the scan chain
Cross-origin POST beacon to data.killbot.ru, a host carrying an unverified 'known attacker' community report
Page loads scripts from several unranked .ru domains (kill-bot.ru family, 10052024.ru) with no visible relationship to the hosting domain
Safety Factors (5)
Domain is well established: registration date 1998-09-24 (~28 years old), 'WELL_ESTABLISHED' / minimal risk category
No credential, payment or disguised password fields; no forms at all
No YARA JavaScript malware patterns and no high-precision native-YARA hits
No credential exfiltration detected by the cross-origin credential analysis
No known malicious kit in the analyst-vetted kit roster; no Google Safe Browsing style threat listed
Domain age information unavailable

Details

Page Title

User verification...

Scan Type

public

Domain Name Analysis

The domain name 'cdn.master-knives.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'cdn'. Its registrable label 'master-knives' stretches across 13 characters holding four vowels versus eight consonants; bonus characters include 1 hyphen. Word splitting yields two words: master, knives. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cdn.master-knives.ru

Page Load Overview

0.63s
Total Load Time
197 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:285 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
68%
technology software
64%
documentation technical
60%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9178.176.128.203Russia
AS31133PJSC MegaFon
231.192.105.204Moscow, Moscow, Russia
AS50867Hostkey B.v.
246.29.114.75Russia
AS48347JSC Mediasoft ekspert
2212.41.11.153Moscow, Moscow, Russia
AS50340JSC Selectel
2147.93.136.189St Louis, Missouri, United States
AS40021Contabo Inc.
277.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
2190.115.31.218United Arab Emirates
AS59692IQWeb FZ-LLC
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
287.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
259--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BDB3D89945B3243644377079EBBF754D36B180039105CA33BC5D8A66EFD0A3A8AF5BE8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VYYhAMCucou1WluT7ffkCOr8h9M7dcNHzLQlwcmDr:VRVc00T7ffkCDr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:114598:BxSegLQIYg6REY2YoWQUJZAnAs2gaQMQAD1WAhNAMKQAqBAVgkCmJAg8pAhtBJBACAUSQZxIAgcaHgGpENB9IiFAEWPIKOMh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:b399cc8c3333cccc
Difference Hash:0000000808000008
Wavelet Hash:3c3c3c24243c3c24
Color Hash:#931f4e

Other Hashes

Crop Resistant:0000000808000008

Scan History

Scan history not available

Unable to load historical scan data