ScanMalware.com

Security Scan Report: visitrussia.online

Site favicon
Submitted: Sep 20, 2026, 2:42:16 PMCompleted: Sep 20, 2026, 2:42:56 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Established, self-branded Russia travel guide with no forms, no impersonation, and no Indicators of Compromise, malware, or IDS hits. Unranked status and bundled eval() calls are weak priors only; nothing malicious present.

Risk Factors
Domain is unranked in Cisco Umbrella (weak prior only)
7 eval() calls and 1 Function() constructor call in bundled JavaScript — typical of framework/analytics bundles, listed for transparency, not as malicious evidence
Safety Factors
Self-branded site, not impersonating another entity
No credential or payment forms anywhere on the page
No Indicators of Compromise, YARA malware, or IDS phishing/malware alerts
Established domain age (485 days) with visible physical address and legitimate travel content
Outbound links are ordinary analytics/consent vendors (Google, Yandex, TikTok, Termly)
Domain age information unavailable

Details

Page Title

Visit Russia

Scan Type

public

Domain Name Analysis

Within the modern generic top-level domain (.online), 'visitrussia.online' is registered while skipping any subdomain. The second-level label 'visitrussia' is 11 characters long containing 5 vowels alongside six consonants. Segmentation suggests two words: visit, russia. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://visitrussia.online/city/moscow

Page Load Overview

2.43s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,589 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism86% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

travel tourism
86%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1093.77.186.138Russia
AS200350Yandex.Cloud LLC
318.66.147.102Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
318.66.147.57Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
3104.18.15.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33.163.248.4Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
392.123.12.13Akamai · CDNDüsseldorf, North Rhine-Westphalia, Germany
AS20940Akamai International B.V.
3216.239.32.36Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
5516--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6B41B21B226E839FDB74D6331DF5D0CB408F01DAFB251AFE246865146C93BA8B95723

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:rTe6mBWk42StpFeDPKSfVS8/w49EAOIIibfAOhnKEr:rTb32ApkDPPBw49hOIIibf3hn9r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:509705:vS8ACQWAmCKAGAAMQIbpCACsQhOAUBBjwJDAAwBBWIcTANGgBByAig74YQAZOVczkQAP99XZBiIbBBYKAiFEAHEQGIEE0xBE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffff0000
Perceptual Hash:d4d654d654d65654
Difference Hash:cc00000000208080
Wavelet Hash:42cbc0c07f000000
Color Hash:#1f6793

Other Hashes

Crop Resistant:cc00000000208080

Scan History

Scan history not available

Unable to load historical scan data