Security Scan Report: drevo-info.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 42 HTTP transactions. The main domain is drevo-info.ru and was registered 17 years ago.

Submitted URL: https://drevo-info.ru

The Cisco Umbrella rank of the primary domain is #471,645 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Established 17-year-old Orthodox encyclopedia (drevo-info.ru) with self-branded article content, a search box only, and no threat-intel, YARA, or IDS findings. Legitimate.

Safety Factors (4)
17-year-old established domain with matching self-branding ('Древо' matches drevo-info.ru).
No credential, payment, or disguised password fields anywhere on the page.
Threat intelligence, YARA, and IDS all returned clean results.
Site presents itself under its own project name, not as another organisation.
Domain age information unavailable

Details

Page Title

Древо

Scan Type

public

Domain Name Analysis

The domain 'drevo-info.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'drevo-info' is 10 characters long containing 4 vowels alongside 5 consonants, notching one hyphen. Splitting it apart reveals 3 words: dr, evo, info. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://drevo-info.ru

Page Load Overview

1.48s
Total Load Time
564 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:71%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:13,684 chars
Detector Agreement:100%

Website Classification

Primary Category

forum community discussion84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

forum community discussion
84%
news/blog
20%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1078.40.198.44United Arab Emirates
AS216071Servers Tech Fzco
837.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
887.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
887.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
877.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
425--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E2F30A45BDC0199F614A563DFE13F68EF209AC6AEEE20E5191F91284E1F3954DF0C28B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:T69Ctbz3PRjt426eyewdybYbVh5WAnRPGBv2gvv8:t42NbYbVh5W+PU0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166492:IOIcOESEAQbvBBkAAAPwPrCgqJQEAiJx6EgkmC4BcCKDJfOGX5wFgACAIMAkgCm4AmkAFWnCiUHVGBSUCCIM+ggyQQAGgBTA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:017f07878f8fdfdf
Perceptual Hash:bc0fc7273a2e6838
Difference Hash:45513f3d3f3e3cb9
Wavelet Hash:011f07014fc7df4f
Color Hash:#d22d9b

Other Hashes

Crop Resistant:45513f3d3f3e3cb9

Scan History

Scan history not available

Unable to load historical scan data