Security Scan Report: perm-resurs.ru

Redirected to:
https://www.amazon.com/?_encoding=UTF8&tag=mntzr-20&linkCode=ur2&linkI...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 78 IPs in 8 countries across 52 domains to perform 295 HTTP transactions. The main domain is perm-resurs.ru and was registered 11 years ago.

Submitted URL: https://perm-resurs.ru

Effective URL:
https://www.amazon.com/?_encoding=UTF8&tag=mntzr-20&linkCode=ur2&linkI...
Redirected

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Domain perm-resurs.ru is reported as a strelastealer malware host and redirects to an Amazon affiliate link, inconsistent with its claimed demolition business. The real content is a Russian demolition company with contact forms only. Treat as compromised/high-risk.

Risk Factors (3)
Content-malware Indicators of Compromise on the primary domain (strelastealer).
Suspicious cross-domain redirect to an Amazon affiliate link from an unrelated Russian demolition company.
Content cloaking between scanner and residential client.
Domain age information unavailable

Details

Page Title

Демонтаж зданий в Перми от 500 ₽/м² — Пермь-Ресурс | Опыт 8 лет

Scan Type

public

Domain Name Analysis

The domain name 'perm-resurs.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. Its registrable label 'perm-resurs' stretches across 11 characters split between 3 vowels and seven consonants; it also includes 1 hyphen. Splitting it apart reveals 4 words: perm, re, sur, s. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://perm-resurs.ru

Page Load Overview

3.21s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,896 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business43% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
43%
documentation technical
41%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
64188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
369.175.50.229United States
AS32475Internap Holding LLC
313.33.52.208Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
318.172.112.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
318.245.34.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
33.229.65.20Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
344.199.181.5Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
344.215.137.166Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
318.173.205.43Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
29578--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A423C871A4F9146B131582DDC4A47B08FA85D93FCA0E9253B2FC196C7FD1CB2966322E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:j9yTFZdapS+zc15AeE8bSvNBOBlWmuq7ycOHP+UvcZpKQfR:joaphzcUefbSjyZycOHmUvcZpKQfR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48777:xbgWKKQFYCxwWYAIowjqAwCAaGTDUDqh1gjJAAkmygFIkgYMgRArCJr4YDEBI5w0CkKQNc4UAIpgL0A4CuBYprMBkVcS3IcA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff6700000003fffb
Perceptual Hash:ac52e9b2c99c2e4b
Difference Hash:22cd65f7d2a7b623
Wavelet Hash:fff700000003fffb
Color Hash:#2dd24e

Scan History

Scan history not available

Unable to load historical scan data