Security Scan: Корона Севера

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/57e91870-306d-4ce4-b8cb-03c887c7165b Domain and IP registration (RDAP)/api/v1/rdap/57e91870-306d-4ce4-b8cb-03c887c7165b Certificate Transparency/api/v1/ct/korona-severa.ru How often this domain was scanned/api/v1/domain/stats/korona-severa.ru Scan history for this domain/api/v1/domain/history/korona-severa.ru?limit=15

This website contacted 137 IPs in 8 countries across 93 domains to perform 316 HTTP transactions. The main domain is korona-severa.ru and was registered 11 years ago.

Submitted URL: https://korona-severa.ru

AI Security Verdict

Low Risk

Confidence: 45%

Risk Score

Established self-branded Russian content site with no credential/payment forms, no impersonation and no malware/IoC hits; low-quality mixed-topic SEO farm with heavy ad-redirect chains. No concrete malicious signal.

Risk Factors

Very high redirect count (132, 107 cross-domain) typical of ad/redirect monetisation chains

Low-quality mixed-topic content farm footprint (travel branding over unrelated commercial articles)

Domain unranked in Cisco Umbrella despite 5-year age

Header content referencing mobile games that 'pay real money' — gambling-adjacent marketing text

Safety Factors

No credential, payment, or disguised-password fields (verified from DOM)

No Indicators of Compromise or threat-intelligence matches

No JavaScript malware / YARA patterns detected

No network IDS alerts (Suricata) or Safe Browsing flags

Established domain (~1887 days / >5 years old)

Self-branded site — no impersonation of a third-party brand or typosquatting

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3

Domain age information unavailable

Details

Page Title

Корона Севера

Scan Type

public

Favicon Hash

MMH3: 1670263831

MD5: 99d963f71a10ae09403d8db268c85fdc

Domain Name Analysis

You're looking at domain 'korona-severa.ru' on the Russian country-code top-level domain (.ru). The registrable portion 'korona-severa' spans 13 characters with 6 vowels and six consonants; bonus characters include one hyphen. Word splitting yields 2 words: korona, severa. Median word length comes out to 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

42.99s

Total Load Time

6.6 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU

Text Length:7,145 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media74% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

74%

travel tourism

59%

gambling betting

47%

adult content

40%

corporate

25%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
44	89.169.42.183	Russia	AS29182JSC IOT
2	31.129.109.116	St Petersburg, St.-Petersburg, Russia	AS198610Beget LLC
2	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	90.156.170.209	Russia	AS198610Beget LLC
2	155.212.203.195	Moscow, Moscow, Russia	AS47764LLC VK
2	185.31.113.248	Germany	AS57363CDNvideo LLC
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	5.255.255.77Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
316	137	-	-