Security Scan Report: intupdateusers.consultant.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is consultant.ru and was registered 29 years ago.

Submitted URL: https://intupdateusers.consultant.ru

The Cisco Umbrella rank of the primary domain is #113,838 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

Consultant Plus's own long-established update server subdomain; no forms, no threat-intel, hunting rule or IDS hits. Self-branded infrastructure with no phishing or malware indicators.

Safety Factors (4)
Well-established 29-year-old domain matching the brand it presents
No forms, no credential or payment fields
No Indicators of Compromise, malware patterns, or network IDS alerts
Minimal, static technical content consistent with an update-distribution endpoint
Domain age information unavailable

Details

Page Title

Сервер обновлений Консультант Плюс

Scan Type

public

Domain Name Analysis

The domain name 'intupdateusers.consultant.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'intupdateusers'. Count 10 characters in 'consultant' holding 3 vowels versus seven consonants. Splitting it apart reveals 1 word: consultant. No strong language cues emerged from the frequency lists.

Screenshot

Update Server (4026.0.1.805650)

Page Load Overview

0.37s
Total Load Time
2 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:66 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
48%
corporate business
46%
government public service
45%
news media journalism
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1194.105.131.28Russia
AS44014Ooo Npo Vmi
1194.105.131.29Russia
AS44014Ooo Npo Vmi
22--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T165F0E5AA90D068D4123150240ED6BA46FD97E9BA39534A0CB0ED36633FF3B00C99F721

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:WyG6tVSROokSSROohNhNJEkafarcLhu+jb:dz272hbYscLBb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:b931e4f5ee0dd4e6b60bc7afc106e928

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:87070f0f0f0f0f1f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data