Security Scan Report: x02.denis-expeditor.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 21 HTTP transactions. The main domain is denis-expeditor.ru and was registered 1 month ago.

Submitted URL: https://x02.denis-expeditor.ru

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Logistics blog whose pages are stuffed with SEO spam pushing a 'Kraken mirror' block-circumvention scheme, plus Spamhaus IDS alerts. No credential phishing found, but the injected illegal-market promotion makes it unsafe.

Risk Factors (4)
Injected SEO spam content repeatedly promoting a 'Kraken mirror' for circumventing blocks (darknet marketplace access promotion)
Obfuscated mixed-script brand rendering ('ЌРÁЌÉH') intended to evade keyword filters
HIGH-severity IDS alerts for Spamhaus DROP-listed traffic
Page content does not match its declared logistics/expedition topic
Safety Factors (5)
Site displays its own brand ('Денис Экспедитор') matching the denis-expeditor.ru domain — no impersonation of another entity
Login form is the site's own same-origin CMS (DataLife Engine) login, not a credential-harvesting form
No cross-origin credential submissions or JavaScript credential exfiltration detected
No threat-intelligence Indicators of Compromise and no JavaScript malware patterns
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Денис Экспедитор

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'x02.denis-expeditor.ru' is registered, featuring subdomain 'x02'. The registrable portion 'denis-expeditor' spans 15 characters containing 6 vowels alongside eight consonants; bonus characters include 1 hyphen. It segments into 2 words: denis, expeditor. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

1) Зеркало Кракена: как обойти блокировки в 2026 году 05/11/2026 14:39 Экспедиция «Зеркало Кракена» стартовала 14 марта 2023 года в 08:17 по местному времени с базы «Арктический пик» в Норвегии, то...

Page Load Overview

6.96s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:37,300 chars
Detector Agreement:100%

Website Classification

Primary Category

forum community discussion97% confidence
Type: webapp
Method: ml+structural

All Detected Categories

forum community discussion
97%
education learning
95%
documentation technical
90%
travel tourism
86%
government public service
86%

Detected Features

Login Form
Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7111.90.143.122Malaysia
AS45839Shinjiru Technology Sdn Bhd
75.255.98.189Dronten, Flevoland, Netherlands
AS60404The Infrastructure Group B.V.
7101.99.75.212Malaysia
AS45839Shinjiru Technology Sdn Bhd
213--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1F3857482DE58BE0641B687D8043F0D789B08FEBF6B461611B91DBE78F3864CA1D25E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:jvzpz/nb6H3QW+YvE63l1y3uRxv3Yy7S+Yv4y3Gp:8pJlMuPYy2pgy3O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:172811:oKACMlGVGisLUCgQJAMs9FgxygAFMAAAgGRMggg1FGeAYRpRwo9h9FwgQjCcEEUAgrAKFQhghEFBCWaiazRaRAFAIAgGWMox

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff83838bcbdb838b
Perceptual Hash:bdb692c0c7969263
Difference Hash:aa2a2a2a32b23a3a
Wavelet Hash:cec383838bdb838b
Color Hash:07000e00000

Other Hashes

Crop Resistant:aa2a2a2a32b23a3a

Scan History

Scan history not available

Unable to load historical scan data