Security Scan Report: iportal.ru

Redirected to:
https://keycloak.sholding.ru/realms/portal/protocol/openid-connect/aut...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is iportal.ru.

Submitted URL: https://iportal.ru

Effective URL:
https://keycloak.sholding.ru/realms/portal/protocol/openid-connect/aut...
Redirected

The Cisco Umbrella rank of the primary domain is #245,603 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 72%

1
Risk Score

Corporate Keycloak SSO login page for Shkulev Holding; self-branded, no impersonation, no IoC/hunting rule/IDS hits, and cross-origin form post is a verified legitimate authentication flow.

Safety Factors (5)
Legitimate SSO/OAuth flow to the organization's own Keycloak server, redirecting to home.shkulev.ru (same holding)
Self-branding consistent with domain ownership (Shkulev Holding / shholding.ru)
No Indicators of Compromise, no malware hunting-rule matches, no IDS alerts, no Safe Browsing hits
All JavaScript served from the site's own domain; no cross-origin script sinks or credential exfiltration
No payment fields and no disguised/orphan credential fields
Domain age information unavailable

Details

Page Title

Аутентификация | Home Shkulev

Scan Type

public

Domain Name Analysis

You're looking at domain 'iportal.ru' on the Russian country-code top-level domain (.ru) and has no subdomain. The second-level label 'iportal' is 7 characters long split between 3 vowels and four consonants. Splitting it apart reveals 2 words: i, portal. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

SHKULEV HOLDING Sign in to your account Flormn un e-mail [ Became ums nonbsoBatens unu E-mail } Tapons 3a6binu napons? [ Became naponb |] © 2006-2026 Shkulev Holding Bce npasa sanyvujeHbi Cpsgat...

Page Load Overview

3.40s
Total Load Time
143 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:175 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical50% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
50%
cryptocurrency blockchain
47%
corporate business
47%
finance banking
45%
government public service
40%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5195.19.71.243Russia
AS44310Internet Technologies LLC
5195.226.222.194Russia
AS44310Internet Technologies LLC
102--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13382C5B2E2580E6F0193989D9D171585312C807F9C253904F7ACA75C2FDEE9EC9BA36C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:xNHJIdU6icBaQqsh1kg8Aj7Z9fQzJYo9JWaWgB8qXA0B2U+Vaka0aqaOaraBim1P:xsdUCf77GR9DvXH2U+80kDS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17670:RVkqAOQCKXUJ0SvIKDgRQjOqQDINWBSQRMJCicEwOjYwkkMCjQBAm9UAE4hjGAFQAOABIRFI4ghmRQFIBFBjEqJDlFEARoRm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7c3ffc3c3ff3e
Perceptual Hash:b2e98e638f897234
Difference Hash:080e161c0e0c606c
Wavelet Hash:e6c2c2c2c3c3fe1c
Color Hash:N/A

Other Hashes

Crop Resistant:080e161c0e0c606c

Scan History

Scan history not available

Unable to load historical scan data