Security Scan Report: onicon.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 8 domains to perform 65 HTTP transactions. The main domain is onicon.ru and was registered 15 years ago.

Submitted URL: https://onicon.ru

The Cisco Umbrella rank of the primary domain is #796,137 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Legitimate, long-established Russian SaaS site for the Onicon online-consultant product; its own-brand login posts to its parent company's cabinet domain, with no threat-intel, malware or phishing evidence.

Risk Factors (2)
Cross-origin credential form: login (email + password) submits to cabinet.megagroup.ru rather than the onicon.ru origin
6 cross-domain redirects observed on the way to the final page
Safety Factors (4)
Established 15-year-old domain with matching self-branding
No Indicators of Compromise, no Safe Browsing, YARA or IDS hits
No payment fields and no disguised password fields
Contact, search and signup forms are typical for a legitimate B2B service site
Domain age information unavailable

Details

Page Title

Онлайн консультант для сайта Onicon. Бесплатный тариф.

Scan Type

public

Domain Name Analysis

The domain 'onicon.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'onicon' is 6 characters long split between three vowels and three consonants. Splitting it apart reveals 2 words: on, icon. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://onicon.ru

Page Load Overview

75.10s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:14,636 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical45% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
45%
corporate business
41%
education learning
34%
technology software
27%
social media network
26%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9176.109.108.37Moscow, Moscow, Russia
AS208677Cloud.ru
7176.123.163.90Moscow, Moscow, Russia
AS208677Cloud.ru
789.169.4.120Moscow, Moscow, Russia
AS50053Anton Levin
7185.32.57.56Russia
AS60357Megagroup.ru LLC
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
787.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
7185.32.57.37Russia
AS60357Megagroup.ru LLC
777.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
787.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
659--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T190F3A531518828BF82079AC6FA22174A73F7547EEFC60901A2FC1F69A7D3CD4CA25D59

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EIxzN/2KNrtTTSE2YPS0UybkurDHJiFjmqOWfjkKzKJ93bgdlTZg:bTSE2YPS0UikurDHJKjxO+jbgsd0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:163540:TYwCQQUCB2wOwgEIiAQJCACClUAJokFkCgBiAgRCSFUqSOiAYAAEiABfPBnYCBMC2CBQit2kQYsYBQoKJCaohANDABAIUkEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbf9f3938197defe
Perceptual Hash:bce3d3382c9c86c3
Difference Hash:2b23663737353126
Wavelet Hash:c9f9e3838191dc1e
Color Hash:#40bf82

Other Hashes

Crop Resistant:2b23663737353126

Scan History

Scan history not available

Unable to load historical scan data