Security Scan Report: avtor24.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 12 domains to perform 112 HTTP transactions. The main domain is avtor24.ru and was registered 15 years ago.

Submitted URL: https://avtor24.ru

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Established 15-year-old self-branded Russian student-help service. No credential/payment forms, no impersonation, no threat-intel or malware hits. Minor redirect/unranked signals only.

Risk Factors (3)
6 cross-domain redirects detected (likely DDoS-Guard/CDN load-balancing on a Russian-hosted site rather than a deceptive redirect chain)
Domain is not ranked in the Cisco Umbrella top 1M despite its age
One unranked script host observed (chat-popup.a24-pro.ru) with no sign of tampering or injected content
Safety Factors (5)
Established domain over 15 years old
Self-branding: page presents its own brand 'Автор24' matching its own domain, no impersonation of a different entity
No password, payment, or disguised credential fields present
No Indicators of Compromise, YARA malware, or malicious JavaScript behavior
Login uses third-party OAuth (VK ID, Yandex ID) with no credential harvesting
Domain age information unavailable

Details

Page Title

Помощь студентам в учебе — курсовые, контрольные и другие работы | Автор24

Scan Type

public

Domain Name Analysis

The domain name 'avtor24.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. Count 7 characters in 'avtor24' split between two vowels and 3 consonants, along with 2 digits. It segments into four words: a, vt, or, 24. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://avtor24.ru

Page Load Overview

2.79s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:14,123 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1691.215.42.198Russia
AS57724Ddos-guard Ltd
884.252.130.113Russia
AS200350Yandex.Cloud LLC
889.248.198.8Moscow, Moscow, Russia
AS49505JSC Selectel
890.156.233.120Russia
AS47764LLC VK
877.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
8104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
818.245.86.69Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8188.72.103.4Dubai, Dubai, United Arab Emirates
AS215013Yandex.Cloud LLC
890.156.232.15Russia
AS47764LLC VK
887.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
11213--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17F44B4B041E854FD8147C796EE2196197B4E90BBFB5B4250B2AC4BB8AFE3CD1D90B50C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/91tYCGhvCi6T3zwTlL2klOuuu+iMAOcC+3pRGJmvXMBEgjOVv1t5t+dXJ8puyck:F1tYCK1kc33KEgyScpmckre4YsmF3B5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:275009:BvIJIX8k7Ci6CAWCAGgNFKgAQLgNsQp0AMEBgLMCEL5AQjADJjhPJQwECwOAogagT2RIQBBABAzkE2PxxtgRHhISAAPSGwhA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffd9d9f1c1e1e1ff
Perceptual Hash:e9969663924d9678
Difference Hash:49333313135313a3
Wavelet Hash:fd8181f181c1c1ff
Color Hash:#87c5c4

Scan History

Scan history not available

Unable to load historical scan data