Security Scan Report: proxy.wavesend.ru

Redirected to:
https://sso.wavesend.ru/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 4 countries across 14 domains to perform 70 HTTP transactions. The main domain is wavesend.ru and was registered 1 year 12 months ago.

Submitted URL: https://proxy.wavesend.ru

Effective URL:
https://sso.wavesend.ru/login
Redirected

The Cisco Umbrella rank of the primary domain is #112,097 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 82%

1
Risk Score

Own-brand login portal for wavesend.ru: established domain, same-site SSO redirect, no password or payment fields, and no malware or IDS findings. The single unverified 'known attacker' tag on a third-party cloud domain is outbound abuse reputation, not evidence about this page.

Safety Factors (5)
Domain registered 699 days ago (established, beyond the 365-day threshold)
Self-branding: page title 'Вейвсенд' matches its own wavesend.ru domain family
No credential or payment fields in the captured DOM (username/email only, with passkey option)
Same-organisation SSO redirect verified as legitimate, not exfiltration
No malware, hunting rule, kit-roster or network IDS findings
Domain age information unavailable

Details

Page Title

Вейвсенд

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'proxy.wavesend.ru' is registered and includes subdomain 'proxy'. The core label 'wavesend' covers 8 characters split between three vowels and five consonants. Splitting it apart reveals two words: waves, end. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

х « Вход в Вейвсенд ИМЯ ПОЛЬЗОВАТЕЛЯ ИЛИ EMAIL Войти или войти через Раззкеу © ==. вы Русский

Page Load Overview

1.69s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:118 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1482.147.67.100Russia
AS57494Adman LLC
482.147.67.99Russia
AS57494Adman LLC
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
43.174.46.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
446.4.253.88Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
43.174.46.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
495.217.122.4Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
484.201.151.229Russia
AS200350Yandex.Cloud LLC
7015--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1038209752300D0B2B8135BD3FA156658922EE12FEA116942F3FCCE228FDBDEC5505E56

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:D6HGgz00OJGHENoy2QC16p6vNWIVwA2OFX:DLgzZOGHBZ6poNrwGt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17912:GlORBXJQoAGCQEEIBFSgpg9VkzUigBcBkZQAQhAArgimCFSqAoEMGlSCEDozG9QAEQ7EUwE5ARTC4C/1qMQAAIMAIgj4AAUI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7efe7e6fffe
Perceptual Hash:f388cc6733996626
Difference Hash:000008184d0c0000
Wavelet Hash:3f3f272725243232
Color Hash:N/A

Other Hashes

Crop Resistant:000008184d0c0000

Scan History

Scan history not available

Unable to load historical scan data