Security Scan Report: nastroyvse.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 44 IPs in 6 countries across 31 domains to perform 169 HTTP transactions. The main domain is nastroyvse.ru and was registered 10 years ago.

Submitted URL: https://nastroyvse.ru

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Ten-year-old Russian tech-tutorial blog with dated articles, zero forms and no threat-intel, hunting rule or IDS hits. Redirect hops are ad-network noise; no impersonation or credential collection.

Risk Factors (2)
Heavy multi-hop redirect chain (13 redirects, 11 cross-domain) — likely ad-network hops, but a signal worth noting
Domain is not in Cisco Umbrella top 1M (weak prior only, not evidence of wrongdoing)
Safety Factors (4)
Established 10-year-old domain registration
No forms of any kind — nothing harvests credentials or payment data
Extensive, dated, coherent editorial content consistent with a genuine tech-help blog
Clean threat intelligence, hunting rule, kit-roster and IDS results
Domain age information unavailable

Details

Page Title

Настрой всё своё домашнее оборудование

Scan Type

public

Domain Name Analysis

The domain name 'nastroyvse.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. Its registrable label 'nastroyvse' stretches across 10 characters holding 3 vowels versus 7 consonants. Breaking it apart gives three words: nas, troy, vse. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nastroyvse.ru

Page Load Overview

75.09s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:3,477 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical42% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
42%
technology software
39%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
405.35.125.110Russia
AS211183AdminVPS OOO
3178.104.21.52Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
377.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3178.176.128.203Naberezhnyye Chelny, Tatarstan Republic, Russia
AS31133PJSC MegaFon
337.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
388.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
392.38.252.74Russia
AS12695LLC Digital Network
3195.209.109.141Russia
AS52007LLC AdRiver
3193.3.184.188Russia
AS50214QWARTA LLC
16944--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2A3C4B6D5B109047226C251A3D17A9D37685207ABBFCEE6B7F43828DEC85E3046274F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:WlKtuEwVG6Hn64idEcYSZCypQaascTpkRB8SrqgsS0NnX:CE1wVE4i0SZ7qaascFkRBZqgsS0NX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:97913:JRCoiAigYOVEFAMBVhCBYgSBXUVKhEBBoswgxgBPYHgww8hHEgGIwQHgFZgCCpLAIlLEJhAEODIAEAAKQISGgSBOAaQjAsEM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfff87878787878f
Perceptual Hash:bfccc0c119321f1f
Difference Hash:64242c4c5c5c0c3c
Wavelet Hash:9e96868787878787
Color Hash:#bc79d2

Other Hashes

Crop Resistant:64242c4c5c5c0c3c

Scan History

Scan history not available

Unable to load historical scan data