Security Scan Report: australianvisa.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 12 domains to perform 99 HTTP transactions. The main domain is australianvisa.ru.

Submitted URL: https://australianvisa.ru

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Established Russian-language travel blog with no forms or malware hits, but an unexplained cross-origin POST to a suspicious .bid domain and a 4-hop redirect chain warrant caution.

Risk Factors (2)
Cross-origin POST to suspicious low-reputation .bid domain (newrotatormarch23.bid)
Excessive cross-domain redirect chain (4 redirects)
Safety Factors (5)
Domain is ~1048 days (2.9 years) old — well-established
No forms of any kind; no credential or payment collection
No Indicators of Compromise, YARA malware, or IDS alerts
Page content reads as a genuine travel/immigration-news blog with internal article links
Privacy policy, user agreement and personal-data consent pages present
Domain age information unavailable

Details

Page Title

Визы и путешествия

Scan Type

public

Domain Name Analysis

Domain 'australianvisa.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. The second-level label 'australianvisa' is 14 characters long split between 7 vowels and seven consonants. Tokenizing the label suggests two words: australian, visa. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://australianvisa.ru

Page Load Overview

22.66s
Total Load Time
6.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:2,326 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property99% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
99%
healthcare medical
97%
travel tourism
96%
education learning
41%
adult content
33%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
977.246.146.24Russia
AS29182JSC IOT
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.251.14.154Google · CDNUnited States
AS15169Google LLC
55.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
578.46.37.35Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
5104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
587.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
537.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
5142.251.13.156Google · CDNUnited States
AS15169Google LLC
9919--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T132F3083450B32076E61F73ACA546621C3672E507CA02CE49B8BC9748DFA4DFD89F6369

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/Uyp3zFWJR2SU8TKviV/n7FksFdKUiQW0Oo3HgGSSSSSSSSSSDJ1XmUxIr7b86Cj:/FGJ3RQMGrEFbYEgTKH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:158049:AiLRBRDsOsGiQJCHhEkFFAQsANiBQhjAtg2RIRGFRtgMRfAReBuAQiywpUHLB0SKBIJ8UeAAQgRUYgsA2GWKAREAawmRSjAo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:60003e3e383c1100
Perceptual Hash:8c33734969b69663
Difference Hash:d5c3bc30f3f1b3e3
Wavelet Hash:60003f3f787c7f11
Color Hash:#2dd298

Scan History

Scan history not available

Unable to load historical scan data