Security Scan Report: instanko.ru

Site favicon
Submitted: Sep 29, 2026, 3:27:08 AMCompleted: Sep 29, 2026, 3:28:03 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

3-year-old Russian DIY blog with no credential or payment forms and no brand impersonation. Only a single-source, unverified IoC against a third-party script host (a11ybar.com) and an unranked script host raise mild concern; content itself is benign.

Risk Factors (2)
Single-source, unverified threat-intel report of 'wp inject' against third-party script host a11ybar.com loaded by the page
Unranked third-party script host qprskl.com serves JavaScript alongside the flagged resource
Safety Factors (5)
Domain age over 3 years (well-established, minimal age risk)
No credential, password, or payment fields anywhere in the captured DOM
No brand impersonation; content are self-branded DIY/construction articles
No YARA malware patterns, no known phishing kit, no credential exfiltration
Largely legitimate third-party scripts (AliExpress/CDN analytics and asset hosts, most ranked in the top 1M)
Domain age information unavailable

Details

Page Title

Станки и инструменты - Все о ручных станках, инструменте и измерениях

Scan Type

public

Domain Name Analysis

The domain name 'instanko.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. Its registrable label 'instanko' stretches across 8 characters split between 3 vowels and five consonants. Segmentation suggests 3 words: in, stank, o. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://instanko.ru

Page Load Overview

14.71s
Total Load Time
5.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:2,899 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical97% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
97%
real estate property
79%
blog personal website
39%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
377.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
3142.132.202.70Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
3212.109.217.26Russia
AS29182JSC IOT
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3172.67.136.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
337.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
30296--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BA63D8B2D506181E6352B092D661BF0D7542813FCF51AE9187DC62AEF3C2ED286B738D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/aUQlF1D+NnnxaH/HY7n8B3OVDokZImgBr/ySTF30viZZrb:1NP83Br/ySTF30vizrb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72484:QgAiQJYILSowVEoigaBxSMA0IDQCmRU0KkA8DCAUFAxBwwLEpHhKUkCKADBAxjAwTyAFzUjhIyEcZJIsANIEYLiURAJBatiS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c38387fbc3c3fb87
Perceptual Hash:b44933cd6cc93696
Difference Hash:332f2e36262e422e
Wavelet Hash:818383dbc3c3fb83
Color Hash:#c5d279

Scan History

Scan history not available

Unable to load historical scan data