Security Report: xn----7sbbsd1asdcfep8l.xn--p1ai - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f0fd6647-24cb-4a04-9176-bb44c30a057a Domain and IP registration (RDAP)/api/v1/rdap/f0fd6647-24cb-4a04-9176-bb44c30a057aHow often this domain was scanned/api/v1/domain/stats/xn----7sbbsd1asdcfep8l.xn--p1ai Scan history for this domain/api/v1/domain/history/xn----7sbbsd1asdcfep8l.xn--p1ai?limit=15

This website contacted 17 IPs in 2 countries across 13 domains to perform 102 HTTP transactions. The main domain is xn----7sbbsd1asdcfep8l.xn--p1ai.

Submitted URL: https://xn----7sbbsd1asdcfep8l.xn--p1ai/

Effective URL:

https://xn----7sbbsd1asdcfep8l.xn--p1ai/en/

Redirected

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking Russian fire-door company page that loads BSC testnet RPC endpoints, triggers 14 CRITICAL EtherHiding malware IDS alerts and shows a fake reCAPTCHA with keyboard-execution instructions — infected with malware; do not interact.

Risk Factors (5)

Critical network IDS malware signature (EtherHiding exfiltration) fired 14 times

Anomalous blockchain RPC / smart-contract infrastructure embedded in a corporate brochure site

Fake reCAPTCHA verification prompt instructing users to run keyboard commands (ClickFix social engineering)

Own URL listed in a threat-intelligence malware feed (single-source, unverified)

Outbound link to viber.click, reported as phishing (single-source, unverified)

Domain age information unavailable

Details

Page Title

О компании | Огнестойкие светопрозрачные конструкции

Scan Type

public

Favicon Hash

MMH3: 366524387

MD5: 8894791e84f5cafebd47311d14a3703c

Domain Name Analysis

The domain name 'xn----7sbbsd1asdcfep8l.xn--p1ai' uses the .xn--p1ai top-level domain and has no subdomain. Its registrable label 'xn----7sbbsd1asdcfep8l' stretches across 22 characters split between two vowels and 13 consonants, notching three digits and four hyphens. Breaking it apart gives eleven words: xn, 7, sb, bsd, 1, as, dc, f, ep, 8, l. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.91s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:60%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:en-gb

Text Length:4,383 chars

Detector Agreement:100%

Language mismatch: Declared as en-gb but detected as ru

Website Classification

Primary Category

corporate business97% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

97%

real estate property

59%

government public service

43%

documentation technical

37%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	185.114.245.109	St Petersburg, St.-Petersburg, Russia	AS9123Jsc timeweb
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
6	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
102	17	-	-