Security Scan Report: r-express.ru

Site favicon
Submitted: Sep 21, 2026, 8:14:33 AMCompleted: Sep 21, 2026, 8:15:29 AMpubliccompleted

AI Security Verdict

Safe Website

Confidence: 82%

1
Risk Score

Established 14-year-old Russian travel agency (Русский Экспресс) with self-branding, no credential/payment forms, no Indicators of Compromise, YARA, or phishing kits. Legitimate travel site.

Safety Factors (5)
14-year-old established domain
Content matches a coherent travel-agency business (tours, hotels, visas, insurance)
Self-branded, consistent title/meta/Open Graph identity
No credential, password, or payment capture fields
No threat-intelligence matches against page or resources
Domain age information unavailable

Details

Page Title

«Русский Экспресс» — ваш надежный проводник в мир индивидуальных путешествий и эксклюзивных VIP-услуг. Наши направления: ОАЭ, Мальдивы, Сейшелы, Китай, Африка, Европа, Россия и многие другие эксклюзивные направления.

Scan Type

public

Domain Name Analysis

The domain 'r-express.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Its registrable label 'r-express' stretches across 9 characters with 2 vowels and six consonants, notching one hyphen. Word splitting yields two words: r, express. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://r-express.ru

Page Load Overview

10.33s
Total Load Time
54.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:35,036 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism98% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
98%
adult content
37%
corporate
35%
forum
20%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4895.129.237.94Russia
AS57724Ddos-guard Ltd
4684.252.133.97Russia
AS200350Yandex.Cloud LLC
46142.251.14.97Google · CDNUnited States
AS15169Google LLC
4692.242.33.62Russia
AS49063Data Storage Center JSC
46188.72.103.4Dubai, Dubai, United Arab Emirates
AS215013Yandex.Cloud LLC
4677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
4687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
46158.160.197.21Moscow, Moscow, Russia
AS200350Yandex.Cloud LLC
4169--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C741657364F604946310A102ACC5B52D8DA782BF66409810BDEC34BE3FF65D6C4ABB1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:jygXr0SDNsJ2NsJ94FcuqBiGYaiGOaiGp+sHEK4ozD:GmrRZs6s0FcxsVg+K9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2142:ABIQsACIAEAAgzBAAAQIEAAAAAAAAgAAQBAQCAAgEAAAAABAgIAAUEABAAQQAAAAAkASgCABAAAkICABEAOAAABggAAAACAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data