Security Scan Report: libreoffice.net.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 40 HTTP transactions. The main domain is net.ru and was registered 29 years ago.

Submitted URL: https://libreoffice.net.ru/

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Unofficial LibreOffice-branded doorway site with a hidden SEO-spam link block and a multi-redirect download funnel. No forms or malware detected, but use the official libreoffice.org instead.

Risk Factors (4)
Use of another organisation's brand (LibreOffice) and near-official styling on a domain the brand does not own
Hidden SEO link block pointing to a network of unrelated spam/redirect domains
Multiple cross-domain redirects around a 'download' call to action, which can deliver unwanted payloads
No verifiable ownership or disclosure identifying the operator of the site
Safety Factors (5)
No credential or payment forms present (0 forms, 0 password fields)
No JavaScript malware patterns, no network IDS alerts, no Indicators of Compromise
No obfuscated JS or cross-origin credential exfiltration detected
Domain registration is aged (well-established registration category)
Established domain (10691 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

LibreOffice — свободный офисный пакет

Scan Type

public

Domain Name Analysis

The domain name 'libreoffice.net.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'libreoffice'. The second-level label 'net' is 3 characters long holding 1 vowel versus 2 consonants. Segmentation suggests 1 word: net. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://libreoffice.net.ru/

Page Load Overview

5.97s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:8,434 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical29% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
29%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10185.216.195.231Russia
AS210656Yandex.Cloud LLC
1087.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1077.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1087.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
404--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1505310A2A3E15C3D501790CFA5E0229422A5F3AD571385E1B9BB1DF43AE7F21B23950F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pdEXfXIFPowkSeC5fltDJC6+LPtmZ+YFSeGp7rLQZ6aeUDlwivPuNxh34NQbew9w:pdEQecTUaSeEnM6aeYd3u7lRew9NYDr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:65700:MTAIQwygKmAgJwRDWQRRjInDqiHDEEAEQjZwydcyEFJQCC0BIKHg5gpGAoaAfBoAJqGkAAYNEkJIAM4UQlcABFwIhJLIQrgR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdf6e67e6618007e
Perceptual Hash:80f7ff4b802a6966
Difference Hash:2b0cccc8ca72aacc
Wavelet Hash:f8fee67e2208007e
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data