Security Report: iportal.ru - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bb74e36e-38e5-40ff-8a96-d497f44f5640 Domain and IP registration (RDAP)/api/v1/rdap/bb74e36e-38e5-40ff-8a96-d497f44f5640How often this domain was scanned/api/v1/domain/stats/iportal.ru Scan history for this domain/api/v1/domain/history/iportal.ru?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is iportal.ru.

Submitted URL: https://iportal.ru

Effective URL:

https://keycloak.sholding.ru/realms/portal/protocol/openid-connect/aut...

Redirected

The Cisco Umbrella rank of the primary domain is #245,603 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Network traffic from this page matched a known malware signature — rated high risk on that basis.

Risk Factors (1)

Network IDS raised a CRITICAL 'PHISHING Suspicious OAuth redirect' alert on the cross-domain OAuth/Keycloak redirect chain — most plausibly a heuristic false positive for a legitimate SSO flow, but noted

Domain age information unavailable

Details

Page Title

Аутентификация | Home Shkulev

Scan Type

public

Favicon Hash

MMH3: 820841442

MD5: d092232955c57ce2d7f4e59baccdc688

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'iportal.ru' is registered with no subdomain. The registrable portion 'iportal' spans 7 characters with three vowels and 4 consonants. Tokenizing the label suggests 2 words: i, portal. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

SHKULEV HOLDING Sign in to your account Flormn un e-mail [ Became ums nonbsoBatens unu E-mail } Tapons 3a6binu napons? [ Became naponb |] © 2006-2026 Shkulev Holding Bce npasa sanyvujeHbi Cpsgat...

Page Load Overview

2.84s

Total Load Time

143 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:175 chars

Detector Agreement:50%

Website Classification

Primary Category

government public service31% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service

31%

technology software

28%

news media journalism

26%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	195.19.71.243	Russia	AS44310Internet Technologies LLC
5	195.226.222.194	Russia	AS44310Internet Technologies LLC
10	2	-	-

Detected Technologies4

PasswordField

100%

Open-Graph-Protocolvwebsite

100%

DDoS-Guard

40%

Vue.js

30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CF024212D5680E6B4AD36499185B4081322D400B4C54FD0CF77CAB9C2F9DDAF9AFA7ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:TAHJI64CSidWdZ5im1vw2VDF+/8mwR5610L4mQo:TB6Tg60k0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8249:VhwiAmYQA4Q90e4oCIA8wnCiVKdAGUWUZM4KkwFJArIAgEcCgHJLGsKFApiBBABCAkBTKOYNMohoFUTOAAYAaqLZEBAANcFg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7c3ffc3c3ff3e

Perceptual Hash:b2e98e638f897234

Difference Hash:080e161c0e0c606c

Wavelet Hash:e6c2c2c2c3c3fe1c

Color Hash:N/A

Other Hashes

Crop Resistant:080e161c0e0c606c

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: iportal.ru