Security Scan Report: nir-vanna.ru

Site favicon
Submitted: Oct 8, 2026, 3:46:40 AMCompleted: Oct 8, 2026, 3:48:41 AMpubliccompleted

This website contacted 25 IPs in 2 countries across 17 domains to perform 264 HTTP transactions. The main domain is nir-vanna.ru and was registered 9 years ago.

Submitted URL: https://nir-vanna.ru

The Cisco Umbrella rank of the primary domain is #588,560 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Established 9-year-old Russian plumbing retailer displaying its own NIR-VANNA brand; no Indicators of Compromise, malware or impersonation. Only its own customer-account login. Low risk.

Risk Factors (1)
8 cross-domain redirects on entry (excessive but consistent with region/CDN/DDoS-Guard routing)
Safety Factors (5)
Established ~9-year-old domain with published phone number and physical retail context
Self-branding: title/meta match the domain, no third-party brand impersonation
No Indicators of Compromise, no JavaScript malware, no Safe Browsing or IDS phishing/malware hit
Forms are standard retail widgets (search, newsletter, callback, one-click order) — no payment card fields captured
Cross-origin hosts are mainstream services (Yandex Metrica, Bitrix24, Diginetica)
Domain age information unavailable

Details

Page Title

NIR-VANNA - интернет-магазин сантехники в Челябинске

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'nir-vanna.ru' is registered while skipping any subdomain. The second-level label 'nir-vanna' is 9 characters long containing 3 vowels alongside 5 consonants; bonus characters include 1 hyphen. It segments into three words: nir, vann, a. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nir-vanna.ru

Page Load Overview

75.09s
Total Load Time
7.0 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:23,269 chars
Detector Agreement:80%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%
forum
40%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2495.129.233.93Russia
AS57724Ddos-guard Ltd
10151.236.71.248Germany
AS204720Global Cloud Network LLC
1080.93.187.15St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
1046.235.53.67Russia
AS39337JSC Corp Soft
1090.156.233.120Russia
AS47764LLC VK
1087.240.137.164Russia
AS47541LLC VK
1081.88.81.16Russia
AS39684OOO Mango Telecom
1087.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1072.56.33.56Moscow, Moscow, Russia
AS9123Jsc timeweb
1031.184.215.149St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
26425--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18F15096280F0202B01578896FB317E0D7A49D467EB079F44B7FC1B9AAFD2C51D69B26C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:0MPPcrhnuUbQx9ehhlA1mFVXKo+hO2Uo+9GMCo+l6lzn7MbyZGZ+ZnDKbxDXedKP:0MPPcrhnuCi91JDL+Y4c

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:926653:4glEhAQTQEGCDJLJIgAECQLMoJBESYGRZIxUlKCAAACYKCgAsQgAsI3ULsrYPQBgaGwBCQAFAOQTgShIIQiLBFhgB2GBADAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc1c3c3c3ffff3f
Perceptual Hash:ad7183dc96d68c4c
Difference Hash:521b170f032b236b
Wavelet Hash:ff8181c3818bfb13
Color Hash:#40bf51

Scan History

Scan history not available

Unable to load historical scan data