Security Scan Report: novsu.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 2 countries across 13 domains to perform 159 HTTP transactions. The main domain is novsu.ru and was registered 22 years ago.

Submitted URL: https://novsu.ru

The Cisco Umbrella rank of the primary domain is #484,516 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 90%

1
Risk Score

Established Novgorod State University portal on its own 22-year-old domain. Self-branded, no credential or payment forms, no threat-intel, hunting rule or IDS hits. Only minor note is a multi-hop redirect chain.

Safety Factors (5)
Well-established 22-year-old domain with no reputation problems
Page content, title and domain consistently identify one institution (self-branding, no impersonation)
No credential, password or payment fields anywhere on the page
No Indicators of Compromise, no malware hunting-rule patterns, no IDS alerts
Google Analytics and Sputnik cross-origin calls are ordinary analytics on a legitimate site
Domain age information unavailable

Details

Page Title

Новгородский государственный университет

Scan Type

public

Domain Name Analysis

The domain name 'novsu.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The core label 'novsu' covers 5 characters split between two vowels and 3 consonants. Segmentation suggests 2 words: nov, su. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://novsu.ru

Page Load Overview

4.45s
Total Load Time
13.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:25,597 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical69% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
69%
education learning
59%
government public service
48%
documentation technical
46%
news media journalism
36%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1585.142.116.250Russia
AS3267IDDQD-AS
9142.251.127.95Google · CDNUnited States
AS15169Google LLC
9151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
9192.178.183.97Google · CDNUnited States
AS15169Google LLC
9217.16.19.172Russia
AS47764LLC VK
987.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
987.240.132.72Russia
AS47541LLC VK
990.156.233.120Russia
AS47764LLC VK
9142.251.13.94Google · CDNUnited States
AS15169Google LLC
95.143.224.43Russia
AS197571LLC Search portal Sputnik
15917--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18AF419F013F861F59102E3A8DA30156A3E5594FBFE434658B3EC0F4AAFD2DA9CC16496

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:7j82hqEXAoyzDHhWGz0KPCC/LG0dOREh+fLg9FWpMXxioyi/v5OdiyxjfB+SN+/T:HhGIC/L6Eyyd8HUhn0qDpP0mDNF6O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:756919:DpkXHaICGgUpAkQUAAKFkwsViGAA5ABgnoECoQwkg9VOgIOYIBgKADOEGIwouNGEENRZCK0eB5S6JxhQDSQK0iSIGAQECicX

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffbc3c3c380000
Perceptual Hash:cfd820269f58da47
Difference Hash:2a0b716868614545
Wavelet Hash:e3ffbc3c3c3800e0
Color Hash:#e06c6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data