ScanMalware.com

Security Scan Report: vtome.ru

Site favicon
Submitted: Sep 19, 2026, 12:01:35 PMCompleted: Sep 19, 2026, 12:04:04 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Established Russian e-book library with self-branding and its own login; no IoC, YARA, or exfiltration. Heavy ad-driven redirect chain and unranked domain warrant only low-risk caution.

Risk Factors
Exceptionally high redirect count (916) with 852 cross-domain hops, consistent with aggressive ad/malvertising networks
Single unencrypted password field on an unranked domain
Safety Factors
3+ year old, well-established domain registration
Clear self-branding matching domain — no brand impersonation
Library content (ebooks/journals) with about, category and privacy-policy pages — matches a real content site
No Indicators of Compromise, no YARA malware, no credential exfiltration, no cross-origin credential forms
Password form is the site's own login, not a phishing capture
Domain age information unavailable

Details

Page Title

Vtome.ru - Электронная библиотека

Scan Type

public

Domain Name Analysis

You're looking at domain 'vtome.ru' on the Russian country-code top-level domain (.ru) without a subdomain. The registrable portion 'vtome' spans 5 characters with two vowels and three consonants. Segmentation suggests 2 words: v, tome. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vtome.ru

Page Load Overview

90.40s
Total Load Time
17.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:6,210 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19691.240.20.39Lithuania
AS59939WIBO Baltic UAB
323.111.211.20Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
3198.54.126.125United States
AS22612Namecheap, Inc.
365.109.72.77Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
323.111.41.100Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
323.111.114.100Moscow, Moscow, Russia
AS50340JSC Selectel
395.181.182.182Perm, Perm Krai, Russia
AS210756EdgeCenter LLC
991266--

Detected Technologies6

PasswordField
100%
OpenSearch
100%
MetaGenerator
100%
jQuery
20%
Yandex.Metrika
20%
AdRiver
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F821DCA714077C194544DB4B9EA0BB449878C1BEFFCC824A96602CBF74C72A5DE1970B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hMNmV5HH7uH7dHh10dnD8z3Rd2N9fZ8tJF3qSWvHXPF1ZHtFI0UCG:Im/HiBUD8bRsXlSGDZi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1335:JAAgAAAAAAICAAAQAAAAAAAAAIBAAAAAAAgACAASCBAEAABAAAQIAAAACACIAABCAAQAgAAAAkgAQAAgAAAEAAAAIAAAAAQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9fd7cfcfdfdf9f9f
Perceptual Hash:b8c74ec73838c738
Difference Hash:2a3696beb43cb4b4
Wavelet Hash:00008a87dfd7cf9f
Color Hash:#bf9540

Other Hashes

Crop Resistant:2a3696beb43cb4b4

Scan History

Scan history not available

Unable to load historical scan data