Security Scan Report: litgu.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 5 domains to perform 64 HTTP transactions. The main domain is litgu.ru and was registered 5 years ago.

Submitted URL: https://litgu.ru

The Cisco Umbrella rank of the primary domain is #685,864 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

2
Risk Score

Established 5-year-old Russian book catalogue with self-branding matching its domain, a standard own-site login, and no threat-intel, hunting rule or IDS hits. Telegram mentions are subscribe links, not impersonation. Only mild concern is a chain of redirects.

Risk Factors (1)
Six cross-domain redirects before landing on the final litgu.ru page (mild obfuscation of the entry path; no credential or malware context)
Safety Factors (5)
Established 5-year-old domain
Self-branding consistent with the domain name
No credential or payment harvesting beyond a standard same-origin user login
Clean threat intelligence, hunting rule, IDS and JavaScript behavioral results
Content is a coherent book/technical-literature catalogue with categories, RSS, privacy policy and legal contact pages
Domain age information unavailable

Details

Page Title

Litgu.ru - Литературный гуру

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'litgu.ru' is registered with no subdomain. The registrable portion 'litgu' spans 5 characters split between 2 vowels and 3 consonants. Splitting it apart reveals two words: lit, gu. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://litgu.ru

Page Load Overview

6.41s
Total Load Time
671 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:14,986 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software74% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
74%
government public service
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1491.240.20.39Lithuania
AS59939WIBO Baltic UAB
10185.253.32.19Russia
AS29182JSC IOT
10198.54.126.125United States
AS22612Namecheap, Inc.
1087.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1087.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1077.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
646--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF23E8B35BD566A7030392CEA520674CB8474CBEEF578C12B1FE0519B7C2F94CB1929A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:yDqsbpJbcylmVLDM0gjx165X+ze7wXW7HzSJkoX9ZohkehPfVP+gpCUo9PciAaZ1:yDqapHlb00n65X+zLG7WJbX9ZohlhPfG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48646:SZrBAB1A0IwAwGgQCRacQJAZoQGYQjMBAQGwRZAWkECSQLDhmECyNAFQklSShqQMTBA1AEUxkZC2BgEoBoAIhIBFYDssOukw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001c3c6c3c3c3c3c
Perceptual Hash:933c6c676363471a
Difference Hash:c730f8d8d8f0d8d8
Wavelet Hash:001e3e7e7c3c3c3c
Color Hash:#79a4d2

Scan History

Scan history not available

Unable to load historical scan data