Security Scan Report: passport-r.com

Redirected to:
https://r-pasportist.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 4 domains to perform 24 HTTP transactions. The main domain is passport-r.com and was registered 8 months ago.

Submitted URL: https://passport-r.com/

Effective URL:
https://r-pasportist.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Site advertises forged Russian passports and identity documents, uses rotating look-alike domains, and the primary domain carries a phishing report — a criminal fraud service, not a legitimate site.

Risk Factors (6)
Sale of forged passports, SNILS, INN and driver's licences as a commercial service
Primary domain flagged as phishing by threat intelligence (single-source, unverified)
Entry domain also flagged as phishing (single-source, unverified)
Cross-domain redirect chain with multiple look-alike domains (r-pasportist.com, r-passporta.com, r-passportov.com)
Unranked domain with no reputation
Implausible 100% guarantee and same-day document issuance claims with fabricated-looking reviews
Domain age information unavailable

Details

Page Title

Нужен паспорт России? Без предоплаты с проводкой по базе

Scan Type

public

Domain Name Analysis

Domain 'passport-r.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'passport-r' stretches across 10 characters holding 2 vowels versus seven consonants, plus 1 hyphen. Segmentation suggests 2 words: passport, r. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://passport-r.com/

Page Load Overview

2.95s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:74%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:6,655 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service94% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
94%
blog personal website
92%
finance banking
88%
news media journalism
87%
adult content
79%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2480.89.224.96Oude Meer, North Holland, Netherlands
AS211381Podaon SIA
241--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E82BB6003DE6C9F1105A04BE8187A0D7DEB49FEBF7B576231A71D7F37E2424852922A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Xvip4Xj+K5KC+J44oOO/9CybmNIARwvUYtyLtg+JRk9VvjldC7s8JdEkTvbewy0O:tXU44w5mO75f7ldqd/pGP69z5vA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18313:BCHpGBEgAAVgDYQuQNwYjJMgAAGKakmSh0F5CkDMc/CQPDIsSlBgWMAgLVKIjItTBjAiBECBLA5CwDkiQCQGwJkoJ4S4YBgn

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff00000000bf9f
Perceptual Hash:9cc1eed39d4d1294
Difference Hash:607cf6b2b8d93926
Wavelet Hash:ffff00000004ffbf
Color Hash:#35d22d

Scan History

Scan history not available

Unable to load historical scan data