Security Scan Report: sf2v.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 4 countries across 15 domains to perform 130 HTTP transactions. The main domain is sf2v.ru and was registered 18 years ago.

Submitted URL: https://sf2v.ru

AI Security Verdict

Low Risk

Confidence: 75%

2
Risk Score

Long-established Russian bearing/industrial parts shop (sf2v.ru, since 2008) showing its own brand. Same-origin catalog and own-account login forms, no payment capture, no impersonation, no threat-intel or malware hits. Only minor concern is a 6-hop redirect chain.

Risk Factors (2)
Six cross-domain redirects in the chain before settling back on sf2v.ru
Domain is not in Cisco Umbrella top 1M (weak prior only)
Safety Factors (6)
Domain age 6842 days (well-established, registered 2008)
Self-branding: title, Open Graph and meta description match the domain's own brand 'Сфера-2В'
No impersonation of any third-party brand
No payment/card fields; login is the site's own same-origin account form
Clean threat intelligence, YARA, IDS and JavaScript behavioral results
Rich, coherent e-commerce content with real product taxonomy and contact details
Domain age information unavailable

Details

Page Title

Интернет-магазин подшипников и РТИ "Сфера-2В"

Scan Type

public

Domain Name Analysis

The domain name 'sf2v.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'sf2v' is 4 characters long holding 0 vowels versus three consonants; bonus characters include 1 digit. Splitting it apart reveals three words: sf, 2, v. Median word length comes out to 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sf2v.ru

Page Load Overview

3.23s
Total Load Time
6.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:8,477 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical56% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
56%
corporate business
41%
e-commerce shopping
32%
government public service
27%
social_media
25%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1589.108.120.172Russia
AS197695Domain names registrar REG.RU, Ltd
592.118.67.2Russia
AS49031LLC Telemir
587.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5217.150.197.184Russia
AS12389Rostelecom
55.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
594.131.94.24Kazakhstan
AS208795Cloud Services Kazakhstan LLP
5185.71.67.146Russia
AS43298Storm Networks LLC
592.118.67.1Russia
AS49031LLC Telemir
587.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
13024--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T150740A6095F8997B500382D5EBA27B1A3D96B4B7E64A060073AC1F60BFE7CC1ED2355C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Tsv/+eWgnLyobHiT7q89cdoO4MtRI0RhrDKqjjXk1o+fr3UXdyB2:oeeWgnLyobHiT7q89cdc0h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:341022:AQkGxPAyAzlaAgzAOBgEFACRhyAIAQPiYECoVFjOKGCUYOUBwFqZapkEFQicIFDAwFJRAUKOgAASDMBhZQdygQQYQFo0WGgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bf9de9f9ffeff980
Perceptual Hash:eb4b9694644b62d3
Difference Hash:65335b43070e5b2c
Wavelet Hash:bd99a1e1e7aba880
Color Hash:#784c3a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data