Security Scan Report: rufox.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 11 domains to perform 82 HTTP transactions. The main domain is rufox.ru and was registered 19 years ago.

Submitted URL: https://rufox.ru

The Cisco Umbrella rank of the primary domain is #486,046 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Established Russian portal with self-branding and own login; no phishing, malware, or impersonation evidence found. Multiple redirect hops are the only notable concern.

Risk Factors (1)
Multiple redirect hops (9 redirects, 8 cross-domain) though final destination is same domain
Safety Factors (5)
Established domain age (7,153 days)
Self-branding matches domain (RuFox.ru)
Same-origin login form; no cross-origin credential submission or exfiltration
No Indicators of Compromise, YARA, IDS, or Safe Browsing hits
Classified as news media journalism (92% confidence); ranked inside Umbrella top 1M
Domain age information unavailable

Details

Page Title

RuFox.ru: почта, новости, знакомства, туризм, видео, фотогалерея, недвижимость, авто, работа, законы, астрология и многое другое - RuFox

Scan Type

public

Domain Name Analysis

Domain 'rufox.ru' uses the Russian country-code top-level domain (.ru) without a subdomain. The core label 'rufox' covers 5 characters split between 2 vowels and three consonants. Breaking it apart gives 2 words: ru, fox. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rufox.ru

Page Load Overview

5.10s
Total Load Time
338 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:3,851 chars
Detector Agreement:80%

Website Classification

Primary Category

news media journalism92% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
92%
blog personal website
89%
government public service
89%
entertainment media
88%
adult content
87%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1091.230.54.6Krasnodar, Krasnodar Krai, Russia
AS25490Rostelecom
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
691.230.54.14Krasnodar, Krasnodar Krai, Russia
AS25490Rostelecom
6193.3.184.133Russia
AS50214QWARTA LLC
690.156.233.120Russia
AS47764LLC VK
681.19.141.40Frankfurt am Main, Hesse, Germany
AS215540Global Connectivity Solutions Llp
6104.21.37.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
690.156.232.15Russia
AS47764LLC VK
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6193.3.184.135Russia
AS50214QWARTA LLC
8213--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16933633415E5506F9282E0A1F9306B1FAD6385BBBA475A05B1FC0EBA3FD2E90C91734D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2W9ameme0YP59g8oOOYHRHGQ2L1D6/5emYIYYCHISkZwuHpL:fomeFP59g8oOZ2LzmYIYYCoNJpL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52320:QQcQkiBPrhUMYI0TQDQJBgD0xMICAsaIhs4BzCMEACEV40GzkANFQGCDCiMCAjkUQY0WAh2DgBFIAARBnBArEMAQJwBKEAgK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbc3c3c3c7c7c7ff
Perceptual Hash:b171ceccce713131
Difference Hash:221e1a1a161c150e
Wavelet Hash:c3c3c2c2c3c7c7c3
Color Hash:#cad22d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data