Security Scan Report: utorria.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 38 HTTP transactions. The main domain is utorria.ru and was registered 2 years 4 months ago.

Submitted URL: https://utorria.ru

The Cisco Umbrella rank of the primary domain is #438,778 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 60%

3
Risk Score

Self-branded Russian torrent-client landing page on an established domain. No credential/payment forms, no IoC, YARA, IDS, or Safe-Browsing hits; only soft signals: a 6-hop cross-domain redirect chain and an unverifiable software download.

Risk Factors (3)
Six cross-domain redirects precede the final page, an unusual chain for a simple software landing page
Site offers executable torrent-client software for download without any verifiable publisher/company details or legal pages
Low business-legitimacy score (20/100) — no address, phone, or social presence documented
Safety Factors (4)
Self-branding confirmed: title/meta match the domain, no claim to be another entity
Established domain age (856 days) and presence inside Cisco Umbrella's top 1M
No credential-harvesting, payment, or disguised-password fields anywhere on the page
No Indicators of Compromise, no Google Safe Browsing hit, no YARA, no IDS alerts, no cross-origin credential exfiltration
Domain age information unavailable

Details

Page Title

Торрент клиент – uTorria

Scan Type

public

Domain Name Analysis

The domain name 'utorria.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'utorria' is 7 characters long containing 4 vowels alongside 3 consonants. Word splitting yields 3 words: ut, or, ria. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://utorria.ru

Page Load Overview

1.58s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,007 chars
Detector Agreement:67%
Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

download file sharing95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

download file sharing
95%
technology software
88%
government public service
51%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1192.42.106.42Strasbourg, Grand Est, France
AS29066velia.net Internetdienste GmbH
987.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
987.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
977.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
384--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BAF2842054F5112B1052A48AFE256F0ABE9DD8ABEA4B670536AD1F9C7FE3C02DD1731C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:m0q0EcJdg0rhrKXJ/NxKPpMRKT3pmXKP7DbKu4hApKdhqaXxsXP3nty:m0xEcbge2vH98xbCtX6X8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35934:UgCxARrAAk5gAqghAUQbYIAREQQiIrYDGkGIVGEAwLQEhDhTBAZoiAAgIDaeBA8AADCASGWMh6QAQhN0qVedxBBQQUCJJMCA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000000ffff
Perceptual Hash:811cfac3bdea039c
Difference Hash:7bd1f1b2f2c3011c
Wavelet Hash:ff0010131062ffff
Color Hash:#6fac53

Scan History

Scan history not available

Unable to load historical scan data