Security Scan Report: nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 7 domains to perform 45 HTTP transactions. The main domain is nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click and was registered 2 weeks ago.

Submitted URL: https://nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click/about

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Very new, unranked site with a keyword-stuffed hostname that openly sells forged security-guard diplomas and certificates; treats visitors' personal data as leads. No credential/payment forms, but the offering itself is fraudulent.

Risk Factors (5)
Sale of forged security-guard credentials/diplomas without required training
Domain only 10 days old with no reputation ranking
Keyword-stuffed, auto-generated-looking hostname on a .click TLD
Six cross-domain redirects used to reach the page
Multiple PII-collecting forms (name, phone, email) feeding an unverifiable operator
Domain age information unavailable

Details

Page Title

О компании «Документы охранника» в России

Scan Type

public

Domain Name Analysis

Within the .click top-level domain, 'nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click' is registered with no subdomain. The second-level label 'nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs' is 57 characters long containing 16 vowels alongside 39 consonants; bonus characters include 2 hyphens. Splitting it apart reveals 19 words: nhc, y, lxx, oh, ran, nik, docs, oh, ran, nik, docs, oh, ran, nik, docs, oh, ran, nik, docs. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click/about

Page Load Overview

1.74s
Total Load Time
941 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:5,374 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%
phishing/scam
40%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9145.63.129.127Frankfurt am Main, Hesse, Germany
AS211381Podaon SIA
65.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6185.71.67.146Russia
AS43298Storm Networks LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
637.18.100.36Russia
AS208677Cloud.ru
457--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14583D76C10B1194E5423E447DA247B0E64636E7FEE2159E4FDAD6258FFC3C48B8B9328

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9dIIU71LUVnd7xh8ChrRcs8Ki3fcYwb9riXQlEtk8qizM:yBL4nd7xh8CRRJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:84102:AEyBoNAwV4nggYlGwBWIQgqiVMHAWkohSIAiQxtikhcI0FYRZAMRqiZEBsXSMe6ga0NGkA4XcQCIEEGsYSQSQAIyjKAjAAUQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffdf9cffffff
Perceptual Hash:bc17435e1823a5de
Difference Hash:cd402034343e85b7
Wavelet Hash:0000df8f84cffd57
Color Hash:#9387c5

Scan History

Scan history not available

Unable to load historical scan data