Security Scan Report: tunnel.ru

Site favicon
Submitted: Sep 19, 2026, 2:35:22 PMCompleted: Sep 19, 2026, 2:37:16 PMpubliccompleted

This website contacted 150 IPs in 9 countries across 83 domains to perform 415 HTTP transactions. The main domain is tunnel.ru and was registered 2 years 10 months ago.

Submitted URL: https://tunnel.ru

The Cisco Umbrella rank of the primary domain is #644,625 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Established Russian music forum/social network with genuine content. No credential harvesting, no brand impersonation, no threat-intel hits. Excessive redirects and eval() calls are notable but unexplained by malware signals.

Risk Factors (2)
Excessive redirect chain: 130 redirects, 110 cross-domain — abnormal navigation behavior
6 eval() calls in JavaScript (dynamic code execution)
Safety Factors (5)
Domain operating for ~2.8 years (well-established registration 2023-12-05)
No password, disguised-password, or payment fields present
No Indicators of Compromise, no YARA malware, no Suricata IDS alerts
Content is a self-branded music community/social network, not impersonating another entity
No cross-origin credential exfiltration detected
Domain age information unavailable

Details

Page Title

На Завалинку - Спроси Алену. Музыкальная энциклопедия. Вся музыка мира

Scan Type

public

Domain Name Analysis

The domain name 'tunnel.ru' uses the Russian country-code top-level domain (.ru). The core label 'tunnel' covers 6 characters split between 2 vowels and 4 consonants. It segments into 1 word: tunnel. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tunnel.ru

Page Load Overview

75.17s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:8,901 chars
Detector Agreement:80%

Website Classification

Primary Category

forum70% confidence
Type: spa
Method: structural

All Detected Categories

forum
70%
social_media
50%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
117193.19.119.38Moscow, Moscow, Russia
AS44812IP Server LLC
295.181.182.182Perm, Perm Krai, Russia
AS210756EdgeCenter LLC
2142.250.154.100Google · CDNUnited States
AS15169Google LLC
288.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
287.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
290.156.233.120Russia
AS47764LLC VK
2142.250.154.139Google · CDNUnited States
AS15169Google LLC
2142.251.155.119Google · CDNUnited States
AS15169Google LLC
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2142.251.157.119Google · CDNUnited States
AS15169Google LLC
415150--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17863432047CD58BB122212C3B5127B2878FB6DB6FA135A90F1BF428937CAD59DE17217

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:cQ/xL3s8IpYnD9RDuXLDA36Ti2/DgdNDF5PcKnQ+xEYFZaCRDGSmDXwf/cD0hD44:jp7ybe8iHwklGt0ssdvbVh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67358:jjUk4AoABhaIBEAFgQAwnDA4QEPNOgCBVj3DiWBiIAgJABCmIIEQKSAqCsARAHFACJJQUOek2N1rSECVQAgkAECQCgoBZKhR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f7f7f7f47673f7f
Perceptual Hash:80050f77070f773f
Difference Hash:c080c0c08684e0c0
Wavelet Hash:0e4e4e0e42423e7e
Color Hash:#bf404d

Other Hashes

Crop Resistant:c080c0c08684e0c0

Scan History

Scan history not available

Unable to load historical scan data