Security Scan Report: www.tutu.ru

Site favicon
Submitted: Sep 21, 2026, 3:06:29 AMCompleted: Sep 21, 2026, 3:07:20 AMpubliccompleted

This website contacted 38 IPs in 4 countries across 40 domains to perform 190 HTTP transactions. The main domain is tutu.ru and was registered 17 years ago.

Submitted URL: https://www.tutu.ru

The Cisco Umbrella rank of the primary domain is #118,977 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Tutu.ru is a long-established Russian travel booking site displaying its own brand with no forms harvesting credentials, no Indicators of Compromise, and no malware signals.

Safety Factors
Established domain with 23-year registration history
Page presents its own brand consistent with the domain
No credential, password or payment capture fields
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
Content matches travel tourism category with full functional site structure
Domain age information unavailable

Details

Page Title

Tutu.ru: Авиа, ЖД, билеты на автобус, отели, расписание электричек и туры онлайн. Стоимость железнодорожных билетов и расписание, цены на 2026 год, заказ ж/д билетов, авиабилетов, бронирование отелей и билетов на автобусы.

Scan Type

public

Domain Name Analysis

Domain 'www.tutu.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'www'. Count 4 characters in 'tutu' holding 2 vowels versus 2 consonants. Word splitting yields 1 word: tutu. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.tutu.ru

Page Load Overview

9.47s
Total Load Time
8.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:10,276 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism58% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
58%
adult content
40%
corporate
35%
technology software
35%
government public service
30%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5178.248.234.61Russia
AS51115HLL LLC
546.235.184.192Russia
AS34879OOO Sovremennye setevye tekhnologii
546.235.184.56Russia
AS34879OOO Sovremennye setevye tekhnologii
5212.193.153.217Russia
AS204878OOO Sovremennye setevye tekhnologii
5212.193.157.199Russia
AS34879OOO Sovremennye setevye tekhnologii
546.235.185.32Russia
AS34879OOO Sovremennye setevye tekhnologii
5212.193.157.173Russia
AS34879OOO Sovremennye setevye tekhnologii
5212.193.153.70Russia
AS204878OOO Sovremennye setevye tekhnologii
546.235.184.227Russia
AS34879OOO Sovremennye setevye tekhnologii
5212.193.157.87Russia
AS34879OOO Sovremennye setevye tekhnologii
19038--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T100A142B35A25E8CE6302F19EF986344C9C5AA17FFE729521E1F9083E34D39B1829451F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:GKyVbBnuY2cEfUtUxH8LtCopbS9Uy152T0TcTYTZTRVJTTyEe:xyVbv2B8EopbS9Uo52T0TcTYTZTLJTTC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4854:gEAQShUQEIAMEBFEAQAiIIgARGQAcRlAQADAIFYSAAGAIAAAEkVCAAQIiJAwIFAAdkAADFIiBgCBIoUKICAYGSACAAICRhwA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data