Security Scan Report: rian.ru

Redirected to:
https://ria.ru/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 37 IPs in 4 countries across 24 domains to perform 246 HTTP transactions. The main domain is rian.ru and was registered 29 years ago.

Submitted URL: https://rian.ru

Effective URL:
https://ria.ru/
Redirected

The Cisco Umbrella rank of the primary domain is #246,692 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Redirector rian.ru lands on ria.ru, the genuine RIA Novosti news site. Login/registration forms post same-origin (legitimate SSO), no malware, IoC or IDS hits. Only minor concern: a direct APK download link.

Risk Factors (1)
Direct .apk download link (ria.apk on apk.ria.ru) encourages sideloading outside official app stores
Safety Factors (4)
Cross-domain redirect ends on the established official brand domain ria.ru (redirector rian.ru is 25 years old)
Cross-origin credential analysis confirms legitimate same-brand SSO/post-to-own-domain, not exfiltration
No Indicators of Compromise, YARA, IDS or Safe Browsing findings
11 third-party script hosts all ranked in the top-1M popularity list; cross-origin JS targets are analytics/CDN (yandex, imgria)
Domain age information unavailable

Details

Page Title

РИА Новости - события в Москве, России и мире сегодня: темы дня, фото, видео, инфографика, радио

Scan Type

public

Domain Name Analysis

You're looking at domain 'rian.ru' on the Russian country-code top-level domain (.ru) without a subdomain. Count 4 characters in 'rian' split between 2 vowels and two consonants. Tokenizing the label suggests two words: ri, an. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rian.ru

Page Load Overview

6.95s
Total Load Time
6.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:18,169 chars
Detector Agreement:100%

Website Classification

Primary Category

forum community discussion97% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum community discussion
97%
news media journalism
93%
government public service
71%
cryptocurrency blockchain
71%
phishing scam
69%

Detected Features

Login Form
Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30194.190.139.47Russia
AS57352Federal State Unitary Enterprise Rossiya Segodnya International Information Agency
6178.176.128.128Russia
AS31133PJSC MegaFon
677.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
688.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
690.156.233.120Russia
AS47764LLC VK
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6194.226.130.226Russia
AS52016JSC ADFACT
6194.226.130.227Russia
AS52016JSC ADFACT
62.16.10.111Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
693.158.134.158Yandex · CLOUDRussia
AS13238YANDEX LLC
24637--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E05E8F55620969E628F8DDAFF262A5D311BA0BFE9E34180B2FD4B585BD3DD0E508D00

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:t1dBnSteHnEOpADmru2QE6E5HNJ0ismsENCP6PpvyjQd:+CEEADmxQY5Hv0ismsENCPayjQd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:870489:ADoBChE2ozMIXFEUQmqtKJAVwAYWh8AK40kgACoBQqUdAPMAASwCgUGgVySIBD5YkUXCyADkgBB0AxQjTkRjvLKieISUGkAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data