Security Scan Report: leonardo-ai.net.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 55 HTTP transactions. The main domain is net.ru and was registered 29 years ago.

Submitted URL: https://leonardo-ai.net.ru/

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Unofficial clone presenting itself as Leonardo.Ai on a lookalike net.ru domain and hiding an SEO-spam link network to other AI-tool clones. No forms or malware, but brand impersonation warrants avoiding it.

Risk Factors (4)
Impersonation of a different entity's brand (Leonardo.Ai) on a non-official domain
Hidden link block advertising a network of lookalike AI-tool domains (SEO spam)
Unranked domain, no established reputation
Multiple cross-domain redirects
Safety Factors (5)
No credential, login or payment forms (0 forms, 0 password fields)
No indicators of compromise from threat intelligence
No JavaScript malware/YARA patterns and no credential exfiltration
No network IDS alerts
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Leonardo.Ai — нейросеть для генерации изображений

Scan Type

public

Domain Name Analysis

The domain name 'leonardo-ai.net.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'leonardo-ai'. The core label 'net' covers 3 characters holding one vowel versus 2 consonants. Splitting it apart reveals 1 word: net. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://leonardo-ai.net.ru/

Page Load Overview

9.24s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:6,077 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13185.184.129.236Russia
AS210656Yandex.Cloud LLC
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7142.250.154.94Google · CDNUnited States
AS15169Google LLC
777.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
787.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
7142.251.127.95Google · CDNUnited States
AS15169Google LLC
787.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
557--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18503257280F664DB0112A19ADA047F096DE2807FEEAB4695726C0EAE7FF7C70D61710D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:VPM1f/nacXHdqVjkIp84DD7aEjLaaFqFF3LkFcG1sW:y1f/acXdqVjk884DDmEjOdm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38426:QsFKnDgAEhDj+DRNppAsgE2FAqAgooAkFGgSDghHEcCgllkBRGDFCCG8CBARWKncABANAsoqDsUAlTFxAQRixOFpMmwBSwGT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff900b0f0f0f700
Perceptual Hash:ea9995c654b45ad8
Difference Hash:bc53337763e1e709
Wavelet Hash:fff901b0f070f700
Color Hash:#d22d9b

Scan History

Scan history not available

Unable to load historical scan data