Security Scan Report: securelist.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 38 IPs in 4 countries across 25 domains to perform 193 HTTP transactions. The main domain is securelist.ru and was registered 19 years ago.

Submitted URL: https://securelist.ru/webrat-distributed-via-github/114486/

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Established Kaspersky Securelist research article about the Webrat trojan. Self-branded, article-type content with no credential or payment forms, no Indicators of Compromise, hunting rule or IDS hits. Legitimate.

Safety Factors (5)
Long-established domain (2007) belonging to Kaspersky's Securelist research publication
Self-branding matches the domain — no impersonation of another entity
Article/news page type (og:type=article) reporting on malware, not offering it
No credential, password or payment forms; comment form posts same-origin
No threat-intelligence, hunting rule, kit-roster or IDS matches
Domain age information unavailable

Details

Page Title

Webrat распространяется через GitHub под видом эксплойтов | Securelist

Scan Type

public

Domain Name Analysis

The domain name 'securelist.ru' uses the Russian country-code top-level domain (.ru). The registrable portion 'securelist' spans 10 characters split between four vowels and six consonants. It segments into 2 words: secure, list. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Ana manc SECURELIST в kaspersky CompanyAccount ЗАДАТЬВОПРОС (©. Темнаятема Russian Решения Отраслевая защита Продукты Сервисы Материалы Онас == Меню контента Threat Response Променяли читы на экс...

Page Load Overview

17.06s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:16,302 chars
Detector Agreement:93%

All Detected Languages

🇷🇺ru(92%)🇺🇸en(7%)🇧🇬bg(1%)

Website Classification

Primary Category

corporate business97% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
97%
technology software
83%
news/blog
35%
corporate
35%
forum
25%

Detected Features

Articles
Comments
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7182.202.190.93Russia
AS209030AO Kaspersky Lab
2187.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
19188.72.103.4Dubai, Dubai, United Arab Emirates
AS215013Yandex.Cloud LLC
1284.201.151.229Russia
AS200350Yandex.Cloud LLC
884.252.133.97Russia
AS200350Yandex.Cloud LLC
687.240.132.78Russia
AS47541LLC VK
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
577.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
5142.251.13.95Google · CDNUnited States
AS15169Google LLC
19338--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A452A8DF8551033129738A9B1BE8708F33D6C60F9428744F6BC849ED7E59D122B6FA9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:d3GlUMMg6/gnBWKME9WSaiD3F312MrDJuy9IDIDSdX3YXpkr73qDCNHeliKbDdPK:d3GlUpg6/gnBWKME9/aiD3F312MrDJuR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1250470:AFiiwEEWBACSQBSvFzYlmIJXwAQAGIGWncElD4FAgHStkBBDEJ4ICaKEsBgBDHqGAgbGEiAgAUawSJgjDBhAMIEIVq/tSBAP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:df9bffc7c7c7ff00
Perceptual Hash:b0cd4f3232c723cd
Difference Hash:2c33323c0f0d3861
Wavelet Hash:0018ffc7c7c7df00
Color Hash:06000000c00

Scan History

Scan history not available

Unable to load historical scan data