Security Scan Report: pnz.royal-change.ru

Redirected to:
https://royal-change.ru/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 9 domains to perform 132 HTTP transactions. The main domain is royal-change.ru and was registered 6 years ago.

Submitted URL: https://pnz.royal-change.ru/

Effective URL:
https://royal-change.ru/
Redirected

AI Security Verdict

High Risk

Confidence: 74%

7
Risk Score

Self-branded, long-registered Russian gold-buying site with no credential/payment forms, but its pnz subdomain is reported as phishing by two independent threat-intel feeds; unverified and not corroborated by page content.

Risk Factors (2)
Primary scanned hostname pnz.royal-change.ru carries a corroborated phishing report from two threat-intelligence feeds
Domain is absent from Cisco Umbrella top-1M, so reputation cannot offset the phishing report
Domain age information unavailable

Details

Page Title

Скупка золота дорого в Москве и области - выгодно продать золото по высокой цене | Royal Change

Scan Type

public

Domain Name Analysis

The domain 'pnz.royal-change.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'pnz'. Its registrable label 'royal-change' stretches across 12 characters containing four vowels alongside 7 consonants; it also includes one hyphen. Splitting it apart reveals two words: royal, change. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pnz.royal-change.ru/

Page Load Overview

90.22s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:15,528 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

OG: site

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20185.22.234.174Moscow, Moscow, Russia
AS210079EuroByte LLC
14185.22.233.75Moscow, Moscow, Russia
AS210079EuroByte LLC
1487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1477.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1487.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1487.250.251.134Yandex · CLOUDRussia
AS13238YANDEX LLC
1437.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
1487.250.251.89Yandex · CLOUDRussia
AS13238YANDEX LLC
1477.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
1329--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15E542B23860D1067223B78AFC55C570870F9EB69F6934B92F2694C1F45CBA6A770F29C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EPHFOF+hAPveba9e4Fmed4lLe+1H00/P/x8EOJcWzJQC8od9sHJ:EPHUAhsGba9Dye+1H0258FJcCQC8oQp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:284185:E08ISASaUpVZRBT7eTgGQAOUQKAwZJIWIQSoJyDEq1GFgBJJKEABUYUACFAEAAuMSJxJlAmgwCOeALAIJIAyY4hsRDNwDAAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00dfdfffffff8381
Perceptual Hash:bc123f436d47523c
Difference Hash:cd3e353633402723
Wavelet Hash:0083dfc3dbff8181
Color Hash:#79d2a9

Scan History

Scan history not available

Unable to load historical scan data