ScanMalware.com

Security Scan Report: lancmanschool.ru

Site favicon
Submitted: Oct 5, 2026, 2:10:29 AMCompleted: Oct 5, 2026, 2:11:46 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established 12-year-old self-branded Russian education center; no credential/payment forms, no Indicators of Compromise, YARA or IDS hits. Only a benign-looking redirect chain and unranked status. Low risk.

Risk Factors (2)
Unusual redirect chain (10 redirects, 9 cross-domain) of unknown origin
Domain is not ranked in the Cisco Umbrella top 1M
Safety Factors (5)
Established 12-year-old domain with continuous operation
Self-branded: title and meta tags match the site's own domain
No credential or payment fields among the parsed forms
Russian-language education content (EGE/OGE prep) with branch, blog and support sections
No Indicators of Compromise, YARA, IDS or Safe Browsing hits; no credential exfiltration
Domain age information unavailable

Details

Page Title

LANCMAN SCHOOL - Образовательный Центр | Курсы подготовки ЕГЭ и ОГЭ онлайн | Частные школы | Онлайн школа ЕГЭ и ОГЭ

Scan Type

public

Domain Name Analysis

The domain name 'lancmanschool.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The second-level label 'lancmanschool' is 13 characters long with 4 vowels and 9 consonants. Tokenizing the label suggests 3 words: lanc, man, school. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lancmanschool.ru

Page Load Overview

16.91s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:70%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:5,028 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning48% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
48%
adult content
39%
cryptocurrency blockchain
27%
government public service
27%
technology software
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
592.255.104.226St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
3104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.127.101Google · CDNUnited States
AS15169Google LLC
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.155.119Google · CDNUnited States
AS15169Google LLC
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
10133--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BB93093158F1247701539294F921BF0E6D66D22BDE670A84B2FC4AE87FC7D9ACC4721A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ThqjdWBnM/L+SIfQN/40QlG0kHPzCN1qV+DpHLtD4INyagiCg/IwJyWX:ThNY/40QUbH4LHLtcINybgA9U

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:97229:AAFhAMAmoFIEitRFAFUpAFIEWcYzPJmQnrID/A4YgZ0AAPmDuPUJQTLBCkLEAGCwAQHokRIDxEACQgAEbVClCpApywCKVgSk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3f3c3c3f300
Perceptual Hash:ed9212b343ec32e9
Difference Hash:2e3e2727030f2727
Wavelet Hash:ffff81d18183f100
Color Hash:#77862d

Other Hashes

Crop Resistant:2e3e2727030f2727,f24d65725292454b,b1f2ca269ad965f1,e7a7a6a2f2929fbf,0203c4c4d4d81c01

Scan History

Scan history not available

Unable to load historical scan data