Security Scan Report: www.litfund.ru

Site favicon
Submitted: Sep 26, 2026, 2:14:03 PMCompleted: Sep 26, 2026, 2:15:30 PMpubliccompleted

This website contacted 17 IPs in 3 countries across 12 domains to perform 201 HTTP transactions. The main domain is litfund.ru.

Submitted URL: https://www.litfund.ru

The Cisco Umbrella rank of the primary domain is #337,266 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Established 11-year-old Russian auction house litfund.ru self-brands correctly; its login/reset/search forms are same-origin with no impersonation or Indicators of Compromise. Minimal risk.

Risk Factors (2)
5 cross-domain redirects on entry (common for CDN/geo/anti-DDoS routing, no credential context)
One eval() dynamic-code call in page JavaScript
Safety Factors (5)
Well-established domain (11 years old) with a long registration history
Self-branded content consistent with the registered domain (Аукционный дом «Литфонд»)
No Indicators of Compromise, no YARA malware patterns, no Safe Browsing threat
No cross-origin credential submission or credential exfiltration detected
login form is same-origin and the site's own; no brand impersonation
Domain age information unavailable

Details

Page Title

Аукционный дом «Литфонд»

Scan Type

public

Domain Name Analysis

Domain 'www.litfund.ru' uses the Russian country-code top-level domain (.ru) and includes subdomain 'www'. Count 7 characters in 'litfund' holding 2 vowels versus 5 consonants. It segments into two words: lit, fund. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.litfund.ru

Page Load Overview

13.62s
Total Load Time
16.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:23,370 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: webapp
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25195.19.1.191Obera, Misiones, Argentina
AS197695Domain names registrar REG.RU, Ltd
11192.178.183.95Google · CDNUnited States
AS15169Google LLC
11168.222.192.43Russia
AS197695Domain names registrar REG.RU, Ltd
1131.31.198.49Russia
AS197695Domain names registrar REG.RU, Ltd
11192.178.183.97Google · CDNUnited States
AS15169Google LLC
115.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
11142.251.13.94Google · CDNUnited States
AS15169Google LLC
1177.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1187.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
11151.248.125.241Russia
AS197695Domain names registrar REG.RU, Ltd
20117--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1666440B0869D1C7F921242D6D4157385B8EF5C3DEEBB8192FBBB42B833D1D90971206A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:RX6qAFVSmm5kFUZ02t0jvEdFGc4unOvLa0Qtw0QVT:R12HQQKs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:321252:hIICQDJBJUukSEQgJ4o5pAmAIwII6BuSMgIEAggQ3EkFYEQuEDUAA1BxgUBFGxAoUivrhUGx3gGFRWFlh1gaRJOJwFocckmT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data