Security Scan Report: bus-lunch.irktorgnewss.ru

Site favicon
Submitted: Oct 1, 2026, 3:22:58 PMCompleted: Oct 1, 2026, 3:25:34 PMpubliccompleted

This website contacted 231 IPs in 10 countries across 126 domains to perform 1498 HTTP transactions. The main domain is bus-lunch.irktorgnewss.ru and was registered 2 years 9 months ago.

Submitted URL: https://bus-lunch.irktorgnewss.ru

The Cisco Umbrella rank of the primary domain is #825,525 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Aged Russian-language entertainment/news portal with only search forms, no brand impersonation, no credential/payment capture, and no malware signals; risk stems from heavy cross-domain redirect/ad chain, not from phishing or content malware.

Risk Factors (3)
Very long cross-domain redirect chain (206 redirects, 178 cross-domain) consistent with aggressive advertising redirects
ML classifier flags adult content at 83% confidence and phishing-scam at 42%
Unranked third-party ad script host ads.gamaads.com served JavaScript to the page
Safety Factors (7)
Domain is 1304 days old (registered 2023-03-07) — well-established, not a throwaway phishing host
No credential, password, disguised-password, or payment fields on the page
No brand impersonation; page self-brands its own domain and Russian-language news content
No JavaScript malware patterns, no native-YARA hits, no known malicious kit in roster
No network IDS alerts and no cross-origin credential exfiltration
Threat-intel matches are generic abuse-reputation tags only and do not describe this page's content
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Бизнес-ланч

Scan Type

public

Domain Name Analysis

You're looking at domain 'bus-lunch.irktorgnewss.ru' on the Russian country-code top-level domain (.ru) and includes subdomain 'bus-lunch'. The core label 'irktorgnewss' covers 12 characters split between 3 vowels and 9 consonants. Breaking it apart gives five words: irk, to, rg, news, s. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bus-lunch.irktorgnewss.ru

Page Load Overview

90.23s
Total Load Time
10.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-ru
Text Length:25,162 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content83% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
83%
phishing scam
42%
news media journalism
33%
blog personal website
32%
entertainment media
31%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11885.198.119.106Russia
AS29182JSC IOT
677.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6193.3.184.135Russia
AS50214QWARTA LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
637.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
65.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6104.21.38.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.168.217Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
688.212.202.23Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
1498231--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3E38720479E1CFF1201A247F4057B0DB8EF0ABF7B675653B6BA2D6E36D2424C52D24A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:sy7fCm4BEZNBXlrTXOayAAFKpvrKYi9GE:ugXlrTXOayAAFCvr4GE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:146525:IURTWQTQGUACEHOwQkBGXgFRRJYmCsFCEIFxMIAoP9JEDgLAs0FDYJEZpBoInNAAL6YKUEMAQkCIQIBQQCOKATjQYgOADvQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181bf8fbfcfcfbf
Perceptual Hash:bb6a68686e31cccc
Difference Hash:0b233b192b1b1b2f
Wavelet Hash:81818f8f8b8f8f87
Color Hash:#e06c6c

Scan History

Scan history not available

Unable to load historical scan data