Security Scan Report: www.rf-cheats.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 39 IPs in 4 countries across 31 domains to perform 154 HTTP transactions. The main domain is rf-cheats.ru and was registered 19 years ago.

Submitted URL: https://www.rf-cheats.ru

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Long-established self-branded Russian game-cheat forum (own vBulletin login, no impersonation, no Indicators of Compromise or malware signatures). Risk comes from distributing cheat/DLL-injector software, not phishing.

Risk Factors (2)
Distributes game cheat/mod software and advertises anti-cheat bypass and DLL injection tools — elevated risk of bundled malware/PUP for users who download from it
Multiple redirects (14) in the capture chain, though no malicious landing observed
Safety Factors (5)
Domain is well-established (7157 days / ~19 years old)
Self-branding: page title and meta match its own domain — no impersonation of another brand
Login is the forum's own same-origin vBulletin authentication; no disguised password field, no payment capture, no cross-origin credential submission
No threat-intelligence matches, no JavaScript malware patterns, no known malicious kit, no credential exfiltration
Classifier rates it as a forum/community discussion site (96%)
Domain age information unavailable

Details

Page Title

Форум читеров RF-Cheats.ru

Scan Type

public

Domain Name Analysis

The domain name 'www.rf-cheats.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'www'. Count 9 characters in 'rf-cheats' split between 2 vowels and six consonants; bonus characters include 1 hyphen. Tokenizing the label suggests two words: rf, cheats. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.rf-cheats.ru

Page Load Overview

75.09s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:22,191 chars
Detector Agreement:60%

Website Classification

Primary Category

forum community discussion96% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum community discussion
96%
entertainment media
67%
technology software
61%
social media network
50%
adult content
38%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4062.173.140.120Russia
AS34300Internet-Cosmos LLC
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
345.43.142.4United Kingdom
AS16276OVH SAS
387.240.185.136Russia
AS47541LLC VK
345.43.142.2United Kingdom
AS16276OVH SAS
387.240.185.165Russia
AS47541LLC VK
393.186.227.168Russia
AS47541LLC VK
387.240.185.148Russia
AS47541LLC VK
3185.178.210.193Russia
AS57724Ddos-guard Ltd
331.25.227.146Moscow, Moscow, Russia
AS56528Big Mmo Game Network Limited
15439--

Detected Technologies15

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T121F3B45080CD666F1106A0EBF111AF49ADFB04FDFF724952B3EE5C3F6AC6818D129269

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hUM2blERzKxgh5MWM+wS8WN28Hv5CBmp8ZAzPNYErLdTdf7DurNhrLgGWKq2sDuV:hpKxSMj+wjWN20v5Rp8ZAzPNYErLdTdo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:167732:ECBAHZJcTDieLFJFBRAJBEti0wqLKcBEkAAAiYXCqAwl8QQIRsJAmRgwGBFAcQAA1NgtCgAABCEAhrokobgxPNgEggggAgiV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data