Security Scan Report: www.tuvaonline.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 9 domains to perform 76 HTTP transactions. The main domain is tuvaonline.ru and was registered 21 years ago.

Submitted URL: https://www.tuvaonline.ru

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Established 21-year-old Tuva regional news agency on its own matching domain. Only its own CMS login form, no impersonation, no malware or phishing content. Single unverified abuse-reputation IP tag is not content evidence.

Risk Factors (1)
Host IP 185.178.208.162 carries a single-source, unverified generic abuse-reputation tag (outbound-behavior tag, not page content)
Safety Factors (6)
21-year-old established domain (2004) on standard hosting
Content is authentic regional news reporting, not a deceptive or transactional page
Site displays its own brand matching its own domain (self-branding, not impersonation)
No brand impersonation, no payment forms, no cross-origin credential submission, no credential exfiltration
No JavaScript malware (YARA), no known malicious kits, no high-precision native-YARA hits
Network IDS alerts are informational heuristics (DDoS-Guard content, *.asia request), not phishing/malware alerts
Domain age information unavailable

Details

Page Title

Тува-Онлайн | Новости Республики Тыва

Scan Type

public

Domain Name Analysis

The domain 'www.tuvaonline.ru' uses the Russian country-code top-level domain (.ru); it also runs on subdomain 'www'. Count 10 characters in 'tuvaonline' with five vowels and 5 consonants. Splitting it apart reveals 2 words: tuva, online. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.tuvaonline.ru

Page Load Overview

75.16s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:9,840 chars
Detector Agreement:100%

Website Classification

Primary Category

forum community discussion26% confidence
Type: webapp
Method: ml+structural

All Detected Categories

forum community discussion
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13185.178.208.162Russia
AS57724Ddos-guard Ltd
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
789.111.173.51Moscow, Moscow, Russia
AS197695Domain names registrar REG.RU, Ltd
790.156.233.120Russia
AS47764LLC VK
787.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
788.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
75.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
790.156.232.15Russia
AS47764LLC VK
777.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
787.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
7610--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BC839521A2D5796F49025582E510BF4938D708BEDBC30D0176EE9A7F7BD2CE48B1B22D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7NJxNvlWNRRfNhGnPBO1owkmnA+qAihgF41lG9MOkQViBp6mK/:7NJxN9U3fNhgPBO1owk+kKF42iOkQ8BW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81414:swGCkVkEwImUBgIwIiDQSAwoF8ghFBKo2jDCSiiA66KkAOQUAJOQCkFAIHmPAAUa6iRAxsL2iAYYBCMRQIgQaAYEcERgoIEK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02c3cbcbcbcbdbcb
Perceptual Hash:b947161632ce7939
Difference Hash:261212121a1a321a
Wavelet Hash:02c3c3cbc3cbcbc3
Color Hash:#6fd22d

Scan History

Scan history not available

Unable to load historical scan data