Security Scan Report: nir-vanna.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 2 countries across 17 domains to perform 271 HTTP transactions. The main domain is nir-vanna.ru and was registered 15 years ago.

Submitted URL: https://nir-vanna.ru

The Cisco Umbrella rank of the primary domain is #588,560 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Long-established Russian plumbing e-commerce site using its own brand, with only its own account login and standard retail forms. No threat-intel, malware or phishing evidence; the multi-redirect entry path is a minor note.

Risk Factors (1)
Eight cross-domain redirects precede the final page, which adds mild opacity to the navigation path
Safety Factors (5)
Established domain (15 years old) with self-branding that matches its own domain
Own same-origin login form only; no credential or payment capture on another party's behalf
No Indicators of Compromise, YARA, Safe Browsing or phishing/malware IDS hits
Published business contact details, delivery, payment, return and contact information
Standard third-party integrations (Yandex Metrica, Bitrix24, Diginetica) typical of legitimate retail
Domain age information unavailable

Details

Page Title

NIR-VANNA - интернет-магазин сантехники в Челябинске

Scan Type

public

Domain Name Analysis

The domain name 'nir-vanna.ru' uses the Russian country-code top-level domain (.ru) without a subdomain. The core label 'nir-vanna' covers 9 characters containing three vowels alongside 5 consonants, along with one hyphen. Word splitting yields three words: nir, vann, a. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nir-vanna.ru

Page Load Overview

75.09s
Total Load Time
7.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:23,348 chars
Detector Agreement:80%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%
forum
40%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1895.129.233.93Russia
AS57724Ddos-guard Ltd
11185.178.208.180Russia
AS57724Ddos-guard Ltd
1177.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
11151.236.71.248Germany
AS204720Global Cloud Network LLC
1180.93.187.15St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
1146.235.53.67Russia
AS39337JSC Corp Soft
1190.156.233.120Russia
AS47764LLC VK
1187.240.137.164Russia
AS47541LLC VK
1181.88.81.16Russia
AS39684OOO Mango Telecom
1184.201.129.37Russia
AS200350Yandex.Cloud LLC
27124--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F7E4C52140F1302600679996BB207B197E86D467FB0B5F55B2FC1B9EAFC3C92CA9B14D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:AMPPmx9eQhlA1mFVXEY1tQzpM+qZWZWZJD6bxDleNKjxC1eDL+Y4h:AMPPzu1eDL+Y4h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:704860:BCQiEAI4CEUMswCU0AoqD4ASCEvo11JSAATciEG6BG2UJBJBEJDAmgFcgISZEApByhAYQmCgFogpRPgE+JGKAGYBIpgVEAYI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc1c3c3c3ffff3f
Perceptual Hash:ad7183d896d69c4c
Difference Hash:521b170f032b236b
Wavelet Hash:ff8181c3818bfb13
Color Hash:#d22d85

Scan History

Scan history not available

Unable to load historical scan data