Security Scan Report: bookwinx.ru

Redirected to:
https://www.bookwinx.ru/
Site favicon
Submitted: Sep 20, 2026, 2:55:38 AMCompleted: Sep 20, 2026, 2:57:13 AMpubliccompleted

This website contacted 14 IPs in 4 countries across 13 domains to perform 42 HTTP transactions. The main domain is bookwinx.ru and was registered 14 years ago.

Submitted URL: https://bookwinx.ru

Effective URL:

https://www.bookwinx.ru/
Redirected

AI Security Verdict

Low Risk

Confidence: 80%

2
Risk Score

Established 14-year-old Russian book forum with its own login/search; no impersonation, Indicators of Compromise, YARA, IDS, or credential exfiltration. Only weak JS code-generation signals.

Risk Factors
Two Function() constructor calls detected in JavaScript (weak code-generation signal; often present in legitimate scripts)
Safety Factors
14-year-old domain
Self-branding matches domain
No brand impersonation
No credential or payment phishing indicators
No threat-intel, YARA, or IDS hits
Domain age information unavailable

Details

Page Title

Bookwinx

Scan Type

public

Domain Name Analysis

The domain name 'bookwinx.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'bookwinx' is 8 characters long with three vowels and 5 consonants. Breaking it apart gives 2 words: book, winx. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bookwinx.ru

Page Load Overview

75.14s
Total Load Time
682 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:7,642 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical78% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
78%
social_media
25%
corporate
25%
forum
20%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3185.115.33.211Amsterdam, North Holland, Netherlands
AS501323nt solutions LLP
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3159.69.75.12Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
337.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
345.82.68.79Netherlands
AS204601NovoServe B.V.
387.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
388.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
390.156.233.120Russia
AS47764LLC VK
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
4214--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AE81D71B0C03D4389622A9B4F478F92D94BF6805BA14EC5898DC81B93CE0FF55D2DE9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:FdsTcuDirigacHm6YvGHs2CG+4/rHkS+ivP/jAc0K3Z1MU3S2ZIx:FdsTarigacG9vGzn+4/LkS+ivP/j50KS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3884:AAAAwaQyAQACQAREIhcAQBggEARQRCQABAIKBOAAAACgAUQggDBAIEAKIIEgAAQQwEogAAAICSAAAAFJZQIAAAEAgEAnAAAw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:92c3f3c3f3c3c3f3
Perceptual Hash:ec5d1c1a9a38ccce
Difference Hash:b6862686a68686a6
Wavelet Hash:10c3d3c3d3c3c3d3
Color Hash:#784f3a

Other Hashes

Crop Resistant:b6862686a68686a6

Scan History

Scan history not available

Unable to load historical scan data