Security Scan Report: vissarion.org

Site favicon
Submitted: Oct 8, 2026, 8:11:08 PMCompleted: Oct 8, 2026, 8:12:34 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Established Vissarion community site appears compromised: CRITICAL IDS alerts for ClickFix/EtherHiding malware exfiltration and a multi-feed malware IoC (zvh4.com) on page traffic. No credential forms, but do not browse.

Risk Factors (4)
CRITICAL IDS malware alerts indicating ClickFix/EtherHiding activity on the page
Multi-feed malware IoC for third-party resource zvh4.com loaded by the page
Threat-intel report naming the primary domain vissarion.org as a malware loader
Ethereum RPC endpoint traffic (0xrpc.io) consistent with blockchain-based payload hosting
Domain age information unavailable

Details

Page Title

Главная - Община Виссариона сегодня

Scan Type

public

Domain Name Analysis

You're looking at domain 'vissarion.org' on the non-profit oriented generic top-level domain (.org) without a subdomain. The core label 'vissarion' covers 9 characters holding four vowels versus five consonants. Tokenizing the label suggests three words: vis, sari, on. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vissarion.org

Page Load Overview

37.50s
Total Load Time
6.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-ru
Text Length:15,330 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning90% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
90%
corporate
35%
forum community discussion
31%
news/blog
20%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13185.155.96.100Estonia
AS202759RJ Network OU
6142.251.150.4Google · CDNUnited States
AS15169Google LLC
6162.159.138.60Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.14.119Google · CDNUnited States
AS15169Google LLC
6104.18.39.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.155.4Google · CDNUnited States
AS15169Google LLC
6162.159.128.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
6142.251.13.119Google · CDNUnited States
AS15169Google LLC
6142.251.20.119Google · CDNUnited States
AS15169Google LLC
15725--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12784A6B1747B283E011F72CBD02A6B0C61D78BBBD7925BF2B6B51168E2B1D507A6314C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:6Rd69SyBsS/BBSvITRK/zZ8d/Ha9QxtuO1oJz:6RdsBsS/BBSTM1Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:388668:tQl0CgYCC4gAyIR9ORAKKhG/J4Aj4eECwhHYICARiEKnokIgInwKBEMW4FDMo4EAAgBKQMMCEW4deBGMIAYQAZLt+nIgEFQy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffd8d0f0ffff00
Perceptual Hash:ded8b1a74cc91a92
Difference Hash:222d3131240c00e5
Wavelet Hash:ff9c889080f7ff00
Color Hash:#86672d

Scan History

Scan history not available

Unable to load historical scan data