Security Scan Report: habr.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 200 IPs in 9 countries across 122 domains to perform 1157 HTTP transactions. The main domain is habr.com and was registered 23 years ago.

Submitted URL: https://habr.com/ru/articles/1105540/

The Cisco Umbrella rank of the primary domain is #74,288 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 94%

0
Risk Score

Established tech publication habr.com hosting a malware-analysis article about a fake Binance job-interview attack; no forms, impersonation, or threat-intel hits.

Safety Factors (4)
23-year-old established domain with long-standing editorial reputation
Article/news page type (og:type=article) discussing malware research
No credential or payment collection; no off-site credential flow
No Indicators of Compromise, malware signatures, or IDS alerts
Domain age information unavailable

Details

Page Title

Как могли взломать Binance через собеседование: новая работа, DevOps и троян в архиве / Хабр

Scan Type

public

Domain Name Analysis

The domain name 'habr.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'habr' covers 4 characters with one vowel and three consonants. Segmentation suggests 2 words: ha, br. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://habr.com/ru/articles/1105540/

Page Load Overview

75.12s
Total Load Time
20.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:109,999 chars
Detector Agreement:80%

Website Classification

Primary Category

phishing scam98% confidence
Type: spa
Method: ml+structural

All Detected Categories

phishing scam
98%
documentation technical
90%
technology software
84%
cryptocurrency blockchain
67%
news/blog
50%

Detected Features

Articles
Comments
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
162178.248.237.68Russia
AS51115HLL LLC
595.47.173.36Tallinn, Harjumaa, Estonia
AS204671Habr Europe OU
5142.251.127.95Google · CDNUnited States
AS15169Google LLC
5104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
577.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
5185.31.113.248Germany
AS57363CDNvideo LLC
5158.160.39.250Moscow, Moscow, Russia
AS200350Yandex.Cloud LLC
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
5142.251.127.156Google · CDNUnited States
AS15169Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
1157200--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3250A32F440152FA73B84C8E749EB0D72D6A22FE6A94460D4E9072C8BE7D78B51F257

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:op7yBJ9/PAZW+T/tSByWUGnresxf75XXZi:q7yBJ9/oZW+T/t6yWUGresl1XXY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:991884:NCIQFhCMDEAHtAQsCAFEEUSERFQphCYRYMKCVeKxBIhUkYWOWiKickkIMhl9YEKybQpg8CgGwGlMBCgAGxiDTygJxCICwCMo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8100fffffffffbff
Perceptual Hash:eb2a6a6aeae992c0
Difference Hash:03479633e20a13d3
Wavelet Hash:000008fbfbebc9fd
Color Hash:07002010001

Scan History

Scan history not available

Unable to load historical scan data