Security Scan Report: rufox.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 11 domains to perform 82 HTTP transactions. The main domain is rufox.ru.

Submitted URL: https://rufox.ru

The Cisco Umbrella rank of the primary domain is #486,046 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 90%

3
Risk Score

Established Russian portal (RuFox) with own login form on its own domain; no phishing, malware, or impersonation indicators, though multiple redirects are present.

Risk Factors (1)
Nine redirects detected, including eight cross-domain redirects, which can obscure the navigation path.
Safety Factors (5)
Established domain with over 20 years of registration history.
Self-branding detected: site presents its own RuFox brand, not impersonating another entity.
Password field belongs to the site's own login form on its own domain, not a credential-harvesting page.
No threat-intelligence matches, no YARA malware, no network IDS alerts, and no credential exfiltration.
Rich content and business identity including OOO RuFox.
Domain age information unavailable

Details

Page Title

RuFox.ru: почта, новости, знакомства, туризм, видео, фотогалерея, недвижимость, авто, работа, законы, астрология и многое другое - RuFox

Scan Type

public

Domain Name Analysis

The domain 'rufox.ru' uses the Russian country-code top-level domain (.ru) without a subdomain. Count 5 characters in 'rufox' containing 2 vowels alongside three consonants. Breaking it apart gives 2 words: ru, fox. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rufox.ru

Page Load Overview

4.91s
Total Load Time
352 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:3,879 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media89% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
89%
news media journalism
76%
adult content
38%
government public service
36%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1091.230.54.6Krasnodar, Krasnodar Krai, Russia
AS25490Rostelecom
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
691.230.54.14Krasnodar, Krasnodar Krai, Russia
AS25490Rostelecom
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6193.3.184.135Russia
AS50214QWARTA LLC
690.156.233.120Russia
AS47764LLC VK
681.19.141.40Frankfurt am Main, Hesse, Germany
AS215540Global Connectivity Solutions Llp
690.156.232.15Russia
AS47764LLC VK
6172.67.206.215Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
8213--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E33643415E5506B9282E0A1F9306B1FAD6385BBBA4B5A05B1FC0EB63FD2E90CD1734D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2W9ameme0YP59g8oOOYHRHGQ2L1DN/5auwvYCHIukZbIHb:fomeFP59g8oOZ2LUuwvYCoxmb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52546:RQKZhCghRZhwCZDAYGjwjkUywUUhZ0IwmkgHLBICgWBAHCGz4BCBIcAAAGiHpcEKUwxTADFB2NlEIgkBQQixwRIgpUDUYBSB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbc3c3c3c7c7c7e7
Perceptual Hash:b179ceccce613131
Difference Hash:221e1e1a161c150e
Wavelet Hash:c3c3c2c2c3c7c7c3
Color Hash:#87b3c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data