Security Scan Report: runway.net.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 5 domains to perform 31 HTTP transactions. The main domain is net.ru and was registered 29 years ago.

Submitted URL: https://runway.net.ru/

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Russian-language doorway site using the Runway AI brand on a non-official domain, with a hidden network of copycat AI-tool domains and a redirect funnel. No credential or payment forms detected.

Risk Factors (5)
Use of another company's brand name and interface styling on a non-official domain
Mimicked 'sign in' / 'create project' navigation of the real Runway app
Hidden link block linking to a network of brand-copycat domains
Affiliate/redirect funnel endpoint (/go/) behind the visible 'create project' action
Excessive cross-domain redirects (7)
Safety Factors (5)
No password, disguised-password or payment fields detected in the captured DOM
No JavaScript malware (YARA), no threat-intelligence matches, no IDS alerts
No credential exfiltration or cross-origin credential forms detected
Only common third-party resources (Google Fonts, Yandex Metrica)
Established domain (10691 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Runway AI / ранэвэй — создать видео из текста или фото

Scan Type

public

Domain Name Analysis

Domain 'runway.net.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'runway'. The second-level label 'net' is 3 characters long split between one vowel and two consonants. Tokenizing the label suggests one word: net. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://runway.net.ru/

Page Load Overview

10.35s
Total Load Time
540 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:4,757 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
58%
entertainment media
54%
documentation technical
52%
education learning
42%
government public service
39%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10185.184.129.229Russia
AS210656Yandex.Cloud LLC
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
387.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
318--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13AD254335099287F1213A3CAE901770CB4B342BFAE5B5A7587A81EBD75E2C64D21F50D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:tOsFIxy/6cd5VynNmiaVlZWIUpEFuH+l1aFaFhjLiBcb1sLJt:tjn/6nNmiQ3WIUpKzbhIJt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31050:oiJhloCgGFEDAecICRwoAnVgqYUYwZIKArFghWgAA3RKdAoRwnhAAOzIEAPgGEnMSFxgDGSpSkdFwgkBQQiiCgPKAVI8MIIo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0e75773370600060
Perceptual Hash:c2953978c73fc1c4
Difference Hash:9ccdceedc5c539c9
Wavelet Hash:0f77777371610170
Color Hash:#40bfb7

Scan History

Scan history not available

Unable to load historical scan data