Security Scan Report: mediasole.ru

Site favicon
Submitted: Sep 23, 2026, 12:40:25 PMCompleted: Sep 23, 2026, 12:41:29 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

10-year-old self-branded Russian lifestyle/forum site with no credential or payment forms and no threat-intel hits. However, 9 cross-domain redirects and spammy 'casino login'/'Google account' subdomain links suggest SEO spam. Moderate risk; avoid clicking off-site spam links.

Risk Factors
Excessive cross-domain redirects (9)
Off-topic 'casino login' and 'Google account' links surfaced from a subdomain (possible SEO spam / injected doorway pages)
eval() JavaScript calls present
Safety Factors
Well-established domain (registered 2015, ~3950 days old)
Self-branding detected — site displays its own 'MediaSole' name, not another entity's brand
No password, payment, or disguised-password fields (verified form facts)
No Indicators of Compromise, no YARA malware matches, no YARA native-scanner hits, no IDS alerts
No cross-origin credential exfiltration detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

MediaSole

Scan Type

public

Domain Name Analysis

Domain 'mediasole.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The core label 'mediasole' covers 9 characters holding 5 vowels versus four consonants. It segments into two words: media, sole. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mediasole.ru

Page Load Overview

18.82s
Total Load Time
6.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:74%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:5,595 chars
Detector Agreement:100%

Website Classification

Primary Category

forum35% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum
35%
gambling betting
33%
social_media
25%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21178.250.157.147Russia
AS29182JSC IOT
737.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
75.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
783.222.28.39Russia
AS47764LLC VK
777.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
777.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
7157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7217.20.147.3Russia
AS47764LLC VK
7193.160.209.71Moscow, Moscow, Russia
AS9123Jsc timeweb
787.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
17523--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T116A1B5C8B583F8625363227A90EFA40972756916284AC840B78CC8F43FB683E4327D9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ZTHJb/5tMA4QqxqwJ5yXBnXhK6YiyZaqUQaiLAmR/shvHBCs3:ZTpb/5tcQqxqnXhK6YzUVQaicmRYL3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4665:FiAkAUACEADARLJFAQBAEAQAAABBwDCIAZUBQBAFAEQgAAAgQFBAQARIAA4A0QQAEAIxFAQAKBxAQICAJCABQAl0ygIDgCEo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7878783cf878fdf
Perceptual Hash:bc73c68ac5391cc3
Difference Hash:2e3e3e1e1c3f3d36
Wavelet Hash:878787838f878787
Color Hash:#2dcad2

Scan History

Scan history not available

Unable to load historical scan data