ScanMalware.com

Security Scan Report: uhoplan.ru

Site favicon
Submitted: Sep 28, 2026, 4:33:08 AMCompleted: Sep 28, 2026, 4:34:14 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

12-year-old self-branded Russian file-sharing/warez portal. The 'LinkedIn' flag is a forum topic title, not impersonation. No phishing forms, no Indicators of Compromise, no malware — but it distributes pirated content. Moderate risk.

Risk Factors (3)
Site distributes pirated/copyrighted media (warez-style portal), exposing users to legal and bundled-malware risks
6 redirects (5 cross-domain) observed in the capture chain
Unranked third-party script host gsimvqfghc.com and ad/tracker networks (adriver.ru, sapo.ru, advcake.com) loaded on the page
Safety Factors (5)
Well-established 12-year-old domain
Self-branding (title/meta match uhoplan.ru) — not brand impersonation
No credential exfiltration and no cross-origin credential forms
No Indicators of Compromise, no JavaScript malware (YARA), no native-YARA high-precision hits, no known phishing kit
No payment or disguised password fields
Domain age information unavailable

Details

Page Title

Ухоплан - Хорошее настроение и интересный, полезный контент в сети

Scan Type

public

Domain Name Analysis

You're looking at domain 'uhoplan.ru' on the Russian country-code top-level domain (.ru) and has no subdomain. Count 7 characters in 'uhoplan' holding three vowels versus four consonants. Segmentation suggests 3 words: u, ho, plan. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://uhoplan.ru

Page Load Overview

3.39s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:10,307 chars
Detector Agreement:60%

Website Classification

Primary Category

social media network85% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
85%
technology software
80%
education learning
77%
healthcare medical
68%
entertainment media
62%

Detected Features

Login Form
Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
391.218.113.108Moscow, Moscow, Russia
AS50867Hostkey B.v.
3109.235.165.222Russia
AS43247YooMoney NBCO LLC
3188.72.103.4Dubai, Dubai, United Arab Emirates
AS215013Yandex.Cloud LLC
3192.178.183.100Google · CDNUnited States
AS15169Google LLC
3193.3.184.43Russia
AS50214QWARTA LLC
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
377.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
20156--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19BE383A245CEB97E031692D5D0603B0D70AB067FEE554E02B1FD082DBFF2F91AC1659A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RdhWdDvDMD5D2D6DJ3kB+Uowvlg3T7lOXNclMiVOlcOy3FlCp6ylUJClk/w8lIAU:RdhcvAFquF3c7t8dt81tSNpeLmZy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:145995:OwAMFgABgwAA45DSIKRSgTUkAARARUIoWMCQYU1YtJZyOOAWPRaJKIEAwxAAPAGCWFBltC1UynYEGC0AAi4JBJQhIUFAkQIj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:9b0202333eebebe8
Difference Hash:e9fccb3b1ada1b23
Wavelet Hash:000049ffcfefef01
Color Hash:#c1e06c

Other Hashes

Crop Resistant:e9fccb3b1ada1b23,9cdddddcdc4e29ec,a989a9f9fcfcfcdc

Scan History

Scan history not available

Unable to load historical scan data