Security Scan Report: freshauto.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 115 IPs in 7 countries across 68 domains to perform 241 HTTP transactions. The main domain is freshauto.ru and was registered 19 years ago.

Submitted URL: https://freshauto.ru

The Cisco Umbrella rank of the primary domain is #531,990 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Established 19-year-old Russian car marketplace (FRESH) with self-branded content, no credential or payment forms, and no threat-intel or malware hits. Heavy ad/tracking redirect chain is anomalous but shows no phishing sink.

Risk Factors (2)
Unusually high redirect count (81 redirects, 75 cross-domain) — anomalous but with no credential-harvesting sink identified
Unranked third-party script host zcdn.ru (no tampering evidence observed alongside it)
Safety Factors (5)
Established domain over 19 years old
Self-branded legitimate car marketplace content (vehicle catalog, trade-in, financing) matching its own domain
No credential or payment forms present
No threat-intel, YARA, or Safe Browsing hits
IDS alerts are informational only (ZeroSSL certificate observation, mobile device check)
Domain age information unavailable

Details

Page Title

Авто с пробегом в Москве. Автомобильный маркетплейс FRESH: продажа и покупка автомобилей в Москве.other network

Scan Type

public

Domain Name Analysis

The domain 'freshauto.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Count 9 characters in 'freshauto' containing four vowels alongside 5 consonants. Splitting it apart reveals two words: fresh, auto. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://freshauto.ru

Page Load Overview

75.09s
Total Load Time
5.7 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:13,167 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network97% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
97%
e-commerce shopping
47%
corporate business
40%
government public service
40%
news media journalism
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1382.202.197.79St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.97Google · CDNUnited States
AS15169Google LLC
2151.236.118.252Germany
AS204720Global Cloud Network LLC
251.250.12.81Russia
AS200350Yandex.Cloud LLC
287.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
287.240.129.133Russia
AS47541LLC VK
2193.232.148.12Russia
AS48061Limited Liability Company GPM Digital Technologies
2185.71.66.141Russia
AS43298Storm Networks LLC
292.118.67.2Russia
AS49031LLC Telemir
241115--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168A4D7B3E1E23063102B8D57A291B73C747B9563D3025EAAE09C777F4B82AD522C65DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:fcaatiQ9XmyOJ5nc9DARthxrkc74kL+O+QS:YtYJ5nc9DARtrrkc74kL+OK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:477969:MQAUAAASYAc0EHgEwUhBmlAISIJMYBGkDADyiIBgVQAeWYSWgEgeigQYYgrjwoQHQQAwASYQ5goQaAICJMgOSjTQiMIRQjSi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data