Security Scan Report: sarinform.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 61 IPs in 6 countries across 37 domains to perform 180 HTTP transactions. The main domain is sarinform.ru.

Submitted URL: https://sarinform.ru

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established self-branded Russian regional news site with no credential/payment forms, no Indicators of Compromise and no malware. Only notable signal is a long cross-domain redirect chain, likely ad monetization.

Risk Factors (2)
Excessive redirect chain: 34 redirects with 27 cross-domain hops, consistent with ad-network monetization and shortening chains
Domain is unranked in Cisco Umbrella top 1M despite being 5 years old
Safety Factors (5)
Established 5+ year old domain with a matching self-branded identity
No credential or payment forms anywhere on the page
No Indicators of Compromise, no YARA malware, no known malicious kits
Suricata alerts are INFO only (DDoS-Guard hosting heuristic), informational and uncorroborated
Rich, coherent, locally-specific news content typical of a legitimate regional outlet
Domain age information unavailable

Details

Page Title

Новости Саратова и Саратовской области сегодня | СИ «СарИнформ»

Scan Type

public

Domain Name Analysis

The domain 'sarinform.ru' uses the Russian country-code top-level domain (.ru) and has no subdomain. Count 9 characters in 'sarinform' with three vowels and 6 consonants. Word splitting yields three words: sar, in, form. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sarinform.ru

Page Load Overview

75.10s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:6,800 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical82% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
82%
cryptocurrency blockchain
75%
finance banking
63%
documentation technical
61%
technology software
56%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
60185.178.208.166Russia
AS57724Ddos-guard Ltd
290.156.233.120Russia
AS47764LLC VK
277.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
287.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
288.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
292.53.64.248Moscow, Moscow, Russia
AS49505JSC Selectel
25.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
295.213.241.212St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
2213.248.44.211Russia
AS12695LLC Digital Network
2217.66.147.39Russia
AS29209MTS PJSC
18061--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D634857095E5349B0002F062D5057D097DAA89BFEB228B15326C5FBE3FE3E60C96B358

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:5MFlpHTYLIG+10ZkDDlmDrOMskMF2dbgwpO:5MFlpHTYLIG+10ZkDDYrOMskMF2dbgw8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:239377:JhLClZkTQDeFAoclEmgAiCIdAz2gSo0DAQjFGQFjRGwWqASLDuIKAwRHsaWFBKC5GBQEAMd6DQwgRCcDoZAsXgXKRizQABDp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff83838387cff9b9
Perceptual Hash:bf34c89337ca941a
Difference Hash:3736363f1e1b232b
Wavelet Hash:ff8383838383b999
Color Hash:#c5d279

Scan History

Scan history not available

Unable to load historical scan data