Security Scan Report: portal-yandex.ru

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Moderate Risk

Confidence: 58%

6
Risk Score

Russian 'Portal' service selling artificial behaviour-factor boosting for Yandex search rankings on an unranked 297-day domain that misuses the Yandex name. No credential/payment forms or malware, so ranked moderate SEO-spam risk rather than phishing.

Risk Factors (4)
Deceptive hostname: 'yandex' brand used in domain with no evidence of official affiliation
Promotes automated manipulation of search-engine behaviour factors (bot traffic), a prohibited SEO service
Keyword-stuffed, SEO-doorway style landing copy targeting ranking manipulation queries
Unranked domain with low business-legitimacy signals (no address, no legal pages, no contact details shown)
Safety Factors (4)
No password, disguised-password or payment fields; the single form is a same-origin API-key auth form (/auth/key.php)
No JavaScript malware (YARA), no known phishing kit, no credential exfiltration detected
Login advertised via legitimate Telegram OAuth widget; IDS Telegram alerts are informational (Misc activity)
Threat-intel match is a generic abuse-reputation tag on a third-party address (149.154.167.99, Telegram) used only as a sub-resource, not the scanned host
Domain age information unavailable

Details

Page Title

Portal — управление поведенческими сценариями и аналитикой

Scan Type

public

Domain Name Analysis

The domain name 'portal-yandex.ru' uses the Russian country-code top-level domain (.ru). The second-level label 'portal-yandex' is 13 characters long split between four vowels and eight consonants; bonus characters include one hyphen. It segments into four words: portal, y, and, ex. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://portal-yandex.ru

Page Load Overview

8.02s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:7,573 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
77%
government public service
63%
corporate business
35%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8217.114.3.205St Petersburg, St.-Petersburg, Russia
AS198610Beget LLC
2172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
2104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
207--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF53B41061A4087D5C07C1D6E9507F1D789AA1FBEE1E525D71BC2AB93FE3C65C83B288

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:IrdhnlgPBvFWVe2t8n7NACoCJSRJo57tAccH5Z+eEIiA7tUYVS9B3U7Coj4M9jtP:CdhCxQtGRkeTgPL526

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62737:YCLjAClViCGIpoBABUl7AosMiZDJIAAoUICIDbKFY4AYjwQGgKMOMAMUiQIoEoBAQRI1AKSQwNtAyARDqBRDmUkAgQqSdiAH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0201717c7c646000
Perceptual Hash:c3a73c3896c5c7c4
Difference Hash:b6c3cbc9c9c9c229
Wavelet Hash:4343717c7c7c6033
Color Hash:#79d2b5

Scan History

Scan history not available

Unable to load historical scan data