Security Scan Report: xl.ru

Site favicon
Submitted: Sep 30, 2026, 7:20:52 AMCompleted: Sep 30, 2026, 7:21:43 AMpubliccompleted

AI Security Verdict

Safe Website

Confidence: 82%

1
Risk Score

Established 27-year-old domain hosting a self-branded SaaS landing page (Prodamus.XL) with only lead-capture forms. No credential/payment harvesting, no Indicators of Compromise, no malware. Legitimate.

Safety Factors (6)
27-year-old registered domain (established 1999)
Self-branding consistent between domain, title, and Open Graph metadata
No password, disguised-password, or payment fields on the page
No Indicators of Compromise, YARA malware, or malicious-kit detections
Cross-origin requests limited to analytics/telemetry (Yandex Metrica, ipinfo.io) — normal for legitimate sites
Forms post same-origin, no credential exfiltration detected
Domain age information unavailable

Details

Page Title

Prodamus.XL – платформа для создания и продвижения онлайн-школ - Prodamus.XL – платформа для создания и продвижения онлайн-школ

Scan Type

public

Domain Name Analysis

The domain name 'xl.ru' uses the Russian country-code top-level domain (.ru). The second-level label 'xl' is 2 characters long containing 0 vowels alongside 2 consonants. Tokenizing the label suggests 1 word: xl. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xl.ru

Page Load Overview

10.74s
Total Load Time
10.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:12,603 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2151.250.43.20Russia
AS200350Yandex.Cloud LLC
1651.250.41.142Russia
AS200350Yandex.Cloud LLC
16142.251.110.95Google · CDNUnited States
AS15169Google LLC
1687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
16142.251.14.94Google · CDNUnited States
AS15169Google LLC
1634.117.59.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
1687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
1646.102.104.4Netherlands
AS202614Kinescope B.V.
1499--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DA8431F38AB6040C6447B8AE6C9277697796222F534ECEB6F5E4346CFF841E00532A5D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:IiVwKuMZUzbz2BWUlUkU6UeQznYb8zoJDHzTz6I0PpaQLQsRLsRQQ1hJ8a1Ec0OE:IiVwKuMZUzbzBUlUkU6UBznYb8zoJDHs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:385399:RIIMZCAKEAAReMEpfGgUYYwQiBRNsTrlHSZKYBOhQIIBxAUAWRZEYASSGLQyAgGhG5ihwEEqSMHEGMgAkjAAI6TAU3jAKEoI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:06002400700000ff
Perceptual Hash:8236be56d33a9646
Difference Hash:8cc4ccddc5c5d5d3
Wavelet Hash:0633676d710d01ff
Color Hash:#931f23

Scan History

Scan history not available

Unable to load historical scan data