Security Scan Report: www.galala.ru

Redirected to:
https://www.reg.ru/domain/shop/lot/galala.ru?rlink=reflink-5095625
Site favicon
Submitted: Sep 22, 2026, 5:14:11 PMCompleted: Sep 22, 2026, 5:14:37 PMpubliccompleted

This website contacted 16 IPs in 1 country across 21 domains to perform 90 HTTP transactions. The main domain is reg.ru.

Submitted URL: https://www.galala.ru

Effective URL:

https://www.reg.ru/domain/shop/lot/galala.ru?rlink=reflink-5095625
Redirected

The Cisco Umbrella rank of the primary domain is #530,481 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Reg.ru's own domain-shop listing for galala.ru. Destination is the legitimate registrar's site with its own SSO login; the flagged SmokeLoader reputation belongs to the entry domain being sold, not this page.

Risk Factors
The domain advertised for sale, galala.ru, carries a multi-source SmokeLoader malware reputation from its previous use — a buyer of that name inherits its history.
Safety Factors
Final destination is reg.ru, an established Russian domain registrar acting as the seller and transaction guarantor.
Site presents its own brand (Рег.ру) matching the destination domain — no brand impersonation.
Login form is the registrar's own account sign-in via a legitimate SSO flow to reg.ru.
No payment-card capture, no credential exfiltration, no obfuscated malicious JS, no YARA/IDS/Safe-Browsing hits.
Circular redirect is explained by the galala.ru -> reg.ru domain-shop hand-off, and the non-content threat-intel tags are generic abuse-reputation only.
Domain age information unavailable

Details

Page Title

Домен galala.ru: купить в магазине доменных имен Рег.ру

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.galala.ru' on the Russian country-code top-level domain (.ru); it also runs on subdomain 'www'. The core label 'galala' covers 6 characters split between three vowels and 3 consonants. It segments into two words: gala, la. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.galala.ru

Page Load Overview

1.10s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:7,399 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software57% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
57%
corporate business
29%
social_media
25%
corporate
25%
forum
20%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1531.31.205.163Russia
AS197695Domain names registrar REG.RU, Ltd
5194.67.72.31Russia
AS197695Domain names registrar REG.RU, Ltd
5194.67.72.36Russia
AS197695Domain names registrar REG.RU, Ltd
5158.160.126.5Moscow, Moscow, Russia
AS200350Yandex.Cloud LLC
531.31.205.95Russia
AS197695Domain names registrar REG.RU, Ltd
577.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
589.208.216.86Russia
AS47764LLC VK
5194.58.116.35Russia
AS197695Domain names registrar REG.RU, Ltd
5194.67.72.33Russia
AS197695Domain names registrar REG.RU, Ltd
5194.67.72.32Russia
AS197695Domain names registrar REG.RU, Ltd
9016--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168341A0195A0203F5213C2FFCD1AFB14B264593BF6672A85FEAD4E24ABC5DD2663360D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hslM5AjQacTnUgK6o5bo+ajC5dQ5BDn5Iex:gM5GQacTnUnHEVUdohdx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:249969:E1IiAKD1iQoAKE2gCcCiAQQLh1FcIeCEDFESEnRZQS7gn7JkagEhCODJEiBoAEicAFAgCANAhgakRABkq5IUAAqWQFGYRIfI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3edfcfd3d3fbcfd8
Perceptual Hash:fdb55287452d5492
Difference Hash:e832383236363a30
Wavelet Hash:0e8e87c3c3d3cbc8
Color Hash:#40931f

Other Hashes

Crop Resistant:e832383236363a30

Scan History

Scan history not available

Unable to load historical scan data