ScanMalware.com

Security Scan Report: bus-lunch.irktorgnewss.ru

Site favicon
Submitted: Sep 24, 2026, 12:39:49 AMCompleted: Sep 24, 2026, 12:42:17 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e92c275b-1ec5-4dee-a8e6-92f6771a7741Domain and IP registration (RDAP)/api/v1/rdap/e92c275b-1ec5-4dee-a8e6-92f6771a7741Certificate Transparency/api/v1/ct/bus-lunch.irktorgnewss.ruHow often this domain was scanned/api/v1/domain/stats/bus-lunch.irktorgnewss.ruScan history for this domain/api/v1/domain/history/bus-lunch.irktorgnewss.ru?limit=15

This website contacted 272 IPs in 10 countries across 123 domains to perform 1791 HTTP transactions. The main domain is bus-lunch.irktorgnewss.ru and was registered 2 years 9 months ago.

Submitted URL: https://bus-lunch.irktorgnewss.ru

The Cisco Umbrella rank of the primary domain is #825,525 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Aged Russian news/entertainment portal with no credential forms, no brand impersonation and no content-malware indicators. Risk stems only from an unusually long cross-domain ad redirect chain and a high adult-content classifier score — no phishing or malware evidence.

Risk Factors
Excessive cross-domain redirect chain (56 cross-domain hops) through ad-network infrastructure
Aggressive advertising/monetization stack typical of low-quality content portals
ML classifier reports an adult-content category at high confidence
Safety Factors
Domain is ~3.5 years old (well-established, past the risky <90-day window)
No password, disguised-password or payment fields — the only forms are a site search box and an internal menu form
No brand impersonation; page presents itself as a self-branded Russian news/entertainment portal
No Indicators of Compromise indicating content malware (matches are generic abuse-reputation tags only)
No JavaScript malware (YARA), no IDS/Suricata phishing or malware alerts, no credential exfiltration
Domain age information unavailable

Details

Page Title

Бизнес-ланч

Scan Type

public

Domain Name Analysis

The domain name 'bus-lunch.irktorgnewss.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'bus-lunch'. Count 12 characters in 'irktorgnewss' with three vowels and 9 consonants. Tokenizing the label suggests 5 words: irk, to, rg, news, s. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bus-lunch.irktorgnewss.ru

Page Load Overview

75.36s
Total Load Time
12.5 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-ru
Text Length:25,162 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content83% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
83%
phishing scam
42%
news media journalism
33%
blog personal website
32%
entertainment media
31%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16585.198.119.106Russia
AS29182JSC IOT
677.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6104.21.38.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
688.212.202.23Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
677.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
6172.67.168.217Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6193.3.184.135Russia
AS50214QWARTA LLC
65.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
637.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
1791272--

Detected Technologies6

HSTS
40%
Joomla!
30%
jQuery
20%
Yandex.Metrika
20%
Prebid
20%
AdRiver
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112310233442A4CCE9300E592F841BF0CA9D1C0FD59BE5655A5E8146A34F03A9C97B71B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Im//ecpy+J7Fc0aiQR2PIm+f3WXc3EzBQLVzLf2:peL+JyCU7m+/WsABCZ2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1622:AQEiAAQAAAAABAAAAEAAAAAAAIAAMBEAAAAAECAAACAIAAAABAQAAABAAAAAAAABAAFAAAHACAAARAAIAgAAAAAAAAgAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181ffbfbfbdbf87
Perceptual Hash:be6b2d6a2d3a3890
Difference Hash:2b23292939392926
Wavelet Hash:81819d8dbd9d9d83
Color Hash:#1f8293

Other Hashes

Crop Resistant:2b23292939392926,0692484084420000

Scan History

Scan history not available

Unable to load historical scan data