Security Scan Report: galala.ru

Redirected to:
https://www.reg.ru/domain/shop/lot/galala.ru?rlink=reflink-5095625
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 20 domains to perform 209 HTTP transactions. The main domain is galala.ru and was registered 3 years 7 months ago.

Submitted URL: https://galala.ru

Effective URL:
https://www.reg.ru/domain/shop/lot/galala.ru?rlink=reflink-5095625
Redirected

The Cisco Umbrella rank of the primary domain is #530,481 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Final page is Reg.ru's legitimate domain-marketplace listing for galala.ru; the risk stems from the corroborated malware (smokeloader) reputation of the redirecting entry domain galala.ru, not from the served page.

Risk Factors (2)
Corroborated content-malware threat-intel (smokeloader family) on the redirecting entry domain galala.ru
Multi-hop redirect chain (3 redirects) originating from a malware-reputed domain
Domain age information unavailable

Details

Page Title

Домен galala.ru: купить в магазине доменных имен Рег.ру

Scan Type

public

Domain Name Analysis

The domain 'galala.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. The second-level label 'galala' is 6 characters long split between 3 vowels and 3 consonants. It segments into 2 words: gala, la. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://galala.ru

Page Load Overview

0.66s
Total Load Time
10.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:7,046 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software58% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
58%
corporate business
28%
social_media
25%
corporate
25%
forum
20%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22194.67.72.31Russia
AS197695Domain names registrar REG.RU, Ltd
1131.31.205.163Russia
AS197695Domain names registrar REG.RU, Ltd
11194.67.72.36Russia
AS197695Domain names registrar REG.RU, Ltd
11158.160.126.5Moscow, Moscow, Russia
AS200350Yandex.Cloud LLC
1131.31.205.95Russia
AS197695Domain names registrar REG.RU, Ltd
11194.58.116.35Russia
AS197695Domain names registrar REG.RU, Ltd
1177.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1189.208.216.81Russia
AS47764LLC VK
11194.67.72.33Russia
AS197695Domain names registrar REG.RU, Ltd
11194.67.72.32Russia
AS197695Domain names registrar REG.RU, Ltd
20918--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191341A019590203F531382FFCD1AFB14B264593BF6672A85FEAD4E24ABC5DD2663360E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:gs2P5AjQacTnUuzHfbo+afC5dDH5BDnk3FT:MP5GQacTnUc/EVAdDZhQT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:243157:ojIIABIoMlOEBEABXJCAwAw3kCBFwBkPSCCCAnIeeFgTrQKCEbZAKsOhECbCKDBBaEDBKBkggMQlEwgmkESGCEmIQr4gAcEj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3edfcfd3d3fbcfdc
Perceptual Hash:fda55287452d5692
Difference Hash:e832383236363a38
Wavelet Hash:0e8e87c3c3d3cbc8
Color Hash:#931f91

Other Hashes

Crop Resistant:e832383236363a38

Scan History

Scan history not available

Unable to load historical scan data