Security Scan Report: vanillasky.ee

Redirected to:
https://vanillasky.ee/ru/salon/service/womenhearing
Submitted: Completed: publiccompleted
This website contacted 26 IPs in 4 countries across 17 domains to perform 109 HTTP transactions. The main domain is vanillasky.ee and was registered 16 years ago.

Submitted URL: http://vanillasky.ee/ru/salon/service/womenhearing

Effective URL:
https://vanillasky.ee/ru/salon/service/womenhearing
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Established 16-year-old Estonian beauty salon site with self-branded content, no credential or payment forms, and no threat-intelligence, YARA, or IDS hits. Legitimate.

Safety Factors (5)
Well-established domain (5941 days old, minimal age risk)
Self-branding detected — site's own brand matches its domain, not impersonation
No credential or payment forms; the sole form is an internal search field
No threat-intelligence, YARA, IDS, or kit-roster matches
Content consistent with a legitimate local beauty salon in Tallinn
Domain age information unavailable

Details

Page Title

Vanilla Sky — Женская стрижкаother network

Scan Type

public

Domain Name Analysis

Domain 'vanillasky.ee' uses the Estonian country-code top-level domain (.ee) with no subdomain. The registrable portion 'vanillasky' spans 10 characters split between 3 vowels and seven consonants. Splitting it apart reveals 2 words: vanilla, sky. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://vanillasky.ee/ru/salon/service/womenhearing

Page Load Overview

80.10s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:2,298 chars
Detector Agreement:50%

Website Classification

Primary Category

healthcare medical70% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
70%
adult content
54%
documentation technical
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
989.235.196.101Tallinn, Harjumaa, Estonia
AS8728AS INFONET
487.240.137.164Russia
AS47541LLC VK
477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4142.251.156.4Google · CDNUnited States
AS15169Google LLC
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
487.240.129.133Russia
AS47541LLC VK
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
487.240.132.67Russia
AS47541LLC VK
10926--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B61380E688EE283F1355B9D1B425B72CB29B427ADB501B11B3FF685E67C1EB0095230D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:15Ksts5Z4fX6DqMgyaBh4uFrpZqvc1H+swSjSqdFFPWEep+CrhwWs9E/8+WNWyz2:15NqN2MgyI/FrpZqvOH+swSjSqdFFP3W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:44137:szBQREIoQAQaICEQJBggJDDJZrUgBKYWnQyVS4ACwCgApwBTAACIRYIOASIBCRqohXGGxAIEnmNttKiEEIgIMAJCQMmwisDg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:8c46424e6373f1f3
Difference Hash:e525323222223222
Wavelet Hash:0000db9b9b9bbb9b
Color Hash:#86672d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data