Security Scan: Сервер обновлений Консультант Плюс

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/afc2742d-3fcc-4987-bdb4-b5f2be3de256 Domain and IP registration (RDAP)/api/v1/rdap/afc2742d-3fcc-4987-bdb4-b5f2be3de256How often this domain was scanned/api/v1/domain/stats/intupdateusers.consultant.ru Scan history for this domain/api/v1/domain/history/intupdateusers.consultant.ru?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is consultant.ru and was registered 29 years ago.

Submitted URL: https://intupdateusers.consultant.ru

The Cisco Umbrella rank of the primary domain is #113,838 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

Risk Score

Official Consultant Plus (КонсультантПлюс) software update server on the vendor's own 29-year-old domain; no forms, no impersonation, no threat-intel hits. Legitimate.

Safety Factors (5)

Brand self-hosted on its own established domain (consultant.ru)

Domain age ~29 years (WELL_ESTABLISHED, minimal risk category)

Zero IoC matches, zero hunting rule malware patterns, zero network IDS alerts

No credential, payment, or login forms; no credential exfiltration signals

Content consistent with legitimate software update-server endpoint

Domain age information unavailable

Details

Page Title

Сервер обновлений Консультант Плюс

Scan Type

public

Favicon Hash

MMH3: -922413315

MD5: ac6d4aaa40239f713a75e99bbc998c51

Domain Name Analysis

You're looking at domain 'intupdateusers.consultant.ru' on the Russian country-code top-level domain (.ru) and includes subdomain 'intupdateusers'. Count 10 characters in 'consultant' containing 3 vowels alongside 7 consonants. It segments into one word: consultant. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.38s

Total Load Time

2 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:66 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software71% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

71%

documentation technical

48%

corporate business

46%

government public service

44%

news media journalism

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	194.105.131.29	Russia	AS44014Ooo Npo Vmi
1	194.105.131.28	Russia	AS44014Ooo Npo Vmi
2	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T165F0E5AA90D068D4123150240ED6BA46FD97E9BA39534A0CB0ED36633FF3B00C99F721

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:WyG6tVSROokSSROohNhNJEkafarcLhu+jb:dz272hbYscLBb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:b931e4f5ee0dd4e6b60bc7afc106e928

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff

Perceptual Hash:87070f0f0f0f0f1f

Difference Hash:c000000000000000

Wavelet Hash:30f0f0f0f0f0f0f0

Color Hash:N/A

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: intupdateusers.consultant.ru