Security Scan Report: rf-cheats.ru

Redirected to:
https://www.rf-cheats.ru/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 43 IPs in 4 countries across 32 domains to perform 155 HTTP transactions. The main domain is rf-cheats.ru.

Submitted URL: https://rf-cheats.ru

Effective URL:
https://www.rf-cheats.ru/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

4
Risk Score

Long-established self-branded Russian cheat forum with its own same-origin login forms and no threat-intel, YARA or Safe-Browsing hits. Risk comes from distributing game cheats/DLL injectors, not from phishing or credential theft.

Risk Factors (3)
Site distributes game cheat software and DLL injector utilities that require bypassing anti-cheat systems; such files are commonly malware carriers
Offers paid cheat creation and game-research services of unverifiable quality and legality
Domain is not ranked in the Cisco Umbrella top 1M despite its age
Safety Factors (5)
Domain is 18 years old (well-established, minimal age risk)
Self-branding detected: title/meta match the domain rf-cheats.ru — no impersonation of another entity
Login and search forms are the site's own, same-origin, with standard vBulletin hidden tokens; no credential exfiltration detected
No Indicators of Compromise, no YARA malware, no known phishing kit, no credential/payment harvesting
Cross-origin scripts are limited to well-ranked analytics, Google, Rambler and game-CDN hosts
Domain age information unavailable

Details

Page Title

Форум читеров RF-Cheats.ru

Scan Type

public

Domain Name Analysis

You're looking at domain 'rf-cheats.ru' on the Russian country-code top-level domain (.ru). Its registrable label 'rf-cheats' stretches across 9 characters holding 2 vowels versus six consonants; it also includes 1 hyphen. Word splitting yields two words: rf, cheats. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rf-cheats.ru

Page Load Overview

75.10s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:22,215 chars
Detector Agreement:60%

Website Classification

Primary Category

forum community discussion96% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum community discussion
96%
entertainment media
67%
technology software
61%
social media network
50%
adult content
38%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2962.173.140.120Russia
AS34300Internet-Cosmos LLC
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
345.43.142.3United Kingdom
AS16276OVH SAS
387.240.185.136Russia
AS47541LLC VK
387.240.185.165Russia
AS47541LLC VK
393.186.227.168Russia
AS47541LLC VK
387.240.185.148Russia
AS47541LLC VK
3185.178.210.193Russia
AS57724Ddos-guard Ltd
331.25.227.149Moscow, Moscow, Russia
AS56528Big Mmo Game Network Limited
387.240.190.77Russia
AS47541LLC VK
15543--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EC04D79044CD666F100290D7F121AF89B9FB04BDFFB34955B3FE2C3E7AC69189029669

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:PuM2bcEU0KxhY51B8Hkwd1N2+Hv5wF8plZN5ESiJKMtMpQD6r57dmzTwu2Q29C/1:PIKxq1+HkI1N2qv5xplZN5ESiJKMtMp8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:173350:RaAKAILprEGAmb/qjiYOikEyowcIJJdAEAXKQAQBAyMkEBmAHmgLm6GEIskQdMEABEARABhamIpCEUQgGtCDAFNX1R1MHBSS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data