Security Scan Report: nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 8 domains to perform 47 HTTP transactions. The main domain is nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click and was registered 2 weeks ago.

Submitted URL: https://nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click/products/kinolog

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

Three-day-old unranked domain funneling via six redirects to sell forged cynologist/security-guard certificates for 15 000 руб. No credential or payment forms and no malware Indicators of Compromise, but the offer itself is a fraudulent document-selling scheme — avoid.

Risk Factors (5)
Sale of counterfeit/forged certification documents (cynologist certificate, security-guard credentials)
Domain only 3 days old and unranked
Nonsensical keyword-stuffed hostname
Chain of 6 cross-domain redirects funneling users to the offer
ML classifier flags 20% phishing/scam probability alongside the government-service category it mimics
Safety Factors (5)
No password fields, no disguised password fields and no payment fields — forms only collect contact details
No Indicators of Compromise, YARA malware, IDS alerts or Safe Browsing hits
No cross-origin credential exfiltration; third-party scripts are common chat/analytics services (JivoSite, Yandex Metrica)
Forms post back to the site's own domain
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Купить сертификат кинолога в России

Scan Type

public

Domain Name Analysis

The domain 'nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click' uses the .click top-level domain and has no subdomain. Count 57 characters in 'nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs' holding 16 vowels versus 39 consonants, plus two hyphens. Breaking it apart gives 19 words: nhc, y, lxx, oh, ran, nik, docs, oh, ran, nik, docs, oh, ran, nik, docs, oh, ran, nik, docs. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click/products/kinolog

Page Load Overview

1.39s
Total Load Time
1008 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,847 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
53%
corporate
25%
phishing/scam
20%
e-commerce
15%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11145.63.129.127Frankfurt am Main, Hesse, Germany
AS211381Podaon SIA
65.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6185.71.67.146Russia
AS43298Storm Networks LLC
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
637.18.100.36Russia
AS208677Cloud.ru
477--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12AF2C71141F5182E010392D6FDB13A0DBD56D62FEF176E6470AC6AAE7F83C86892732D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:XU1Y428ey7EpIVedII5Wes32wMN6BgyIbqvJR5wMNhPChW4nLxRXssKFtd42PYYz:zxdIIU7ByqvPCh5NRcsKFtd42PYI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36284:QhIAklBRaLDXIiqSiEwYiAAALKUKDYmDIIUQ8JeDQWWGgGB2HAFkUwHAhCaEgCREZFAFi8BDAoUlASQgIsJgr4RQpBHZOHEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffe7f7f7fffe
Perceptual Hash:e61b5a26522756ad
Difference Hash:cd32104e05058484
Wavelet Hash:0000c7e7e7e7e764
Color Hash:#2d8649

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data