Security Scan Report: australianvisa.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 3 countries across 12 domains to perform 99 HTTP transactions. The main domain is australianvisa.ru.

Submitted URL: https://australianvisa.ru

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Aged travel-blog domain with legitimate-looking content and no credential/payment forms, but flagged for eval() usage, 4 cross-domain redirects and an outbound POST to a suspicious .bid 'rotator' endpoint suggestive of ad-redirect/monetization abuse.

Risk Factors (3)
Outbound POST to a suspicious .bid domain using a 'rotator' path, a pattern common in ad-fraud/redirect networks
Excessive cross-domain redirects (4)
Dynamic code execution via eval() calls
Safety Factors (4)
Domain is ~1044 days (>2 years) old — well established
Zero forms, zero password fields, zero payment fields — no credential or payment harvesting
No Indicators of Compromise, no YARA malware, no IDS alerts, no Safe Browsing threats
Content reads as a genuine Russian-language travel/visa article blog
Domain age information unavailable

Details

Page Title

Визы и путешествия

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'australianvisa.ru' is registered while skipping any subdomain. The core label 'australianvisa' covers 14 characters split between seven vowels and 7 consonants. Segmentation suggests two words: australian, visa. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://australianvisa.ru

Page Load Overview

18.48s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:2,301 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical96% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
96%
real estate property
94%
travel tourism
86%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1977.246.146.24Russia
AS29182JSC IOT
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4192.178.183.155Google · CDNUnited States
AS15169Google LLC
45.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4136.243.73.146Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
4151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.251.127.94Google · CDNUnited States
AS15169Google LLC
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
437.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
9921--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17FF3F83450B32076E61F73ACA546621C3672E507CA02CE49B8BC9748DFA4DFD89F6369

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kUyp3zFWJR2HU8a+KviV/qhFksFdKUiQWnOo3H5SSSSSSSSScmUxIr7b86CCy7eE:kFGJORCM73EFbcEgTKi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157907:GuEENBloRIzw8OEHNVh8BVVUoDYUGAS1gBBRgQQEYAIBBQcjFHBCTAgBFvEAAUYGqAUqwEE2hDTCCVASgogYhSfBD2qw/A+i

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:60001c3d383c1b01
Perceptual Hash:ca7333c961b2cb61
Difference Hash:d5c7b971e3f1b3e3
Wavelet Hash:60003dbf787c7f11
Color Hash:#52862d

Scan History

Scan history not available

Unable to load historical scan data