Security Scan Report: nrmed.ru

Redirected to:
https://www.nrmed.ru/
Site favicon
Submitted: Sep 20, 2026, 9:03:40 PMCompleted: Sep 20, 2026, 9:05:36 PMpubliccompleted

This website contacted 17 IPs in 2 countries across 15 domains to perform 170 HTTP transactions. The main domain is nrmed.ru and was registered 28 years ago.

Submitted URL: https://nrmed.ru

Effective URL:

https://www.nrmed.ru/
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate Moscow clinic chain НИАРМЕДИК on its own 18-year-old domain. Self-branded, no credential/payment forms, no IoC or malware signals. The 20 INFO IDS alerts are generic DDoS-Guard hosting heuristics.

Safety Factors
Established domain (18 years old)
Self-branding: page title/meta match the domain's own brand (Ниармедик / nrmed.ru)
No credential or payment forms present
No threat-intelligence, YARA, or Safe Browsing matches
Forms submit to the same origin as the scanned page
Consistent, coherent medical-services content
Domain age information unavailable

Details

Page Title

Медицинский центр НИАРМЕДИК - записаться на прием к врачу в клинику частной медицинской сети в Москве

Scan Type

public

Domain Name Analysis

You're looking at domain 'nrmed.ru' on the Russian country-code top-level domain (.ru) without a subdomain. Count 5 characters in 'nrmed' with 1 vowel and four consonants. Splitting it apart reveals 2 words: nr, med. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nrmed.ru

Page Load Overview

90.19s
Total Load Time
11.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:28,059 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical97% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
97%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1094.228.116.164St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
1084.201.151.229Russia
AS200350Yandex.Cloud LLC
10185.76.232.248Russia
AS201193Internet Projects JSC
10142.251.155.119Google · CDNUnited States
AS15169Google LLC
10217.74.42.159Russia
AS20919DataFort LLC
10142.251.156.119Google · CDNUnited States
AS15169Google LLC
1087.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1087.240.137.164Russia
AS47541LLC VK
1092.118.67.1Russia
AS49031LLC Telemir
1089.248.197.162Moscow, Moscow, Russia
AS50340JSC Selectel
17017--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T153A16463089CA8561301B21AF9D5BA0CDC17517F6F5D6808B4DE08BA3FE0FB4446BA6E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:K0f6Woh6dP0AKB7fdfWoh6dP0AGbhayBqpfN2NwNvQNL+kShcONHgeahGhNHEh4o:tf52PfI2X7spp++kSGGHgWHXv+2Ub6To

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4710:EsgDQQABgAAAAwCIQwpAABSgBAhAKUAAmgIggEEAiAIBQI0AAEOAEAAAAgYAE+gQASgABgAAACCAJQCAAkEBCAQAEIMUgAAo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff81838181ffff
Perceptual Hash:ba67c5c884b73a86
Difference Hash:630b2b2b3b3b3b8f
Wavelet Hash:bbc381818181ffcf
Color Hash:#3a5678

Scan History

Scan history not available

Unable to load historical scan data