Security Scan Report: leadplan.ru

Site favicon
Submitted: Oct 3, 2026, 9:00:38 AMCompleted: Oct 3, 2026, 9:01:39 AMpubliccompleted

This website contacted 27 IPs in 4 countries across 22 domains to perform 191 HTTP transactions. The main domain is leadplan.ru and was registered 28 years ago.

Submitted URL: https://leadplan.ru

The Cisco Umbrella rank of the primary domain is #691,625 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established 18-year-old self-branded SaaS site for website widgets with no credential/payment forms, no threat-intel, YARA or exfiltration signals; only a lengthy redirect chain of minor concern.

Risk Factors (1)
Excessive redirect chain: 9 redirects, 8 of them cross-domain
Safety Factors (6)
Domain age 18+ years (well-established, minimal age risk)
Self-branding consistent across title, meta tags and page content
No credential or payment forms (password, disguised-password and payment field counts all zero)
No Indicators of Compromise, no JavaScript YARA malware, no known malicious kit, no credential exfiltration
Established third-party scripts (Google Analytics, Yandex Metrica, Tilda, Dashamail) on top-1M-ranked hosts
Prominent privacy compliance statement citing Russian 152-FZ personal data law
Domain age information unavailable

Details

Page Title

Виджеты для сайта | Конструктор виджетов LeadPlan

Scan Type

public

Domain Name Analysis

Domain 'leadplan.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'leadplan' spans 8 characters with 3 vowels and five consonants. Segmentation suggests two words: lead, plan. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://leadplan.ru

Page Load Overview

9.22s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:62%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:5,393 chars
Detector Agreement:80%

Website Classification

Primary Category

blog personal website96% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
96%
social media network
62%
government public service
38%
technology software
36%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9176.57.65.199Russia
AS57724Ddos-guard Ltd
7194.48.203.181United Arab Emirates
AS205282Tilda Platform Cloud Services Co. L.L.C
795.181.182.182Perm, Perm Krai, Russia
AS210756EdgeCenter LLC
7142.251.127.95Google · CDNUnited States
AS15169Google LLC
7193.176.233.29Moscow, Moscow, Russia
AS49505JSC Selectel
75.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
7142.251.110.97Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7185.129.100.50Russia
AS57724Ddos-guard Ltd
7142.251.13.113Google · CDNUnited States
AS15169Google LLC
19127--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195F3C731E6416A2A528781DED2B4A7097225C24EDF074E91E2F4837DBFC3DD3AE5128D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:OUlk8XcLdXXcLk5l1QuJfFik2jG5gAJkKtFVi7riPBVDpCkFGnKQ6dV60t0P0501:OUlk8XcLdXXcLk5zQuJfFik2jG5gAJkr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166006:TSGQEAswY8Bl5gQIcIogFGSR0lwABleZNkgNWjIkRdqQAtr0MmBimgTewIpEhJEIIIAJgAzAAJ9KKBBWQMagw8wBCGBgQSwK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000c0c0c0cffffcb
Perceptual Hash:9312ed6639e66493
Difference Hash:d5d8d8d8d9cd1e33
Wavelet Hash:000c0e0c0cffffdf
Color Hash:#ac539c

Scan History

Scan history not available

Unable to load historical scan data