Security Scan Report: qip.ru

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is qip.ru.

Submitted URL: https://qip.ru

The Cisco Umbrella rank of the primary domain is #187,145 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 62%

3
Risk Score

Retro QIP/ICQ-style messenger on an established domain with no forms, no credential or payment capture and no threat-intel, YARA or IDS hits. Only concern is the ICQ brand reference on a non-ICQ domain; no concrete malicious signal present.

Risk Factors (3)
Page brands itself 'QIP / ICQ' and evokes ICQ's UIN/registration model while hosted on a domain not owned by ICQ's parent company
Messaging service advertises 'registration without email or phone' and paid short numbers, a model that can be abused for anonymity
Domain is unranked in global top-100K (DNS query volume only, not evidence of wrongdoing on its own)
Safety Factors (4)
Domain is over one year old (registered 2025-09-30), an 'established' age band
Zero forms, zero password fields, zero payment fields — no credential or payment capture on this page
No threat-intelligence matches, no JavaScript malware, no network IDS alerts
Content is coherent, self-consistent and reads like a genuine retro-messenger project page
Domain age information unavailable

Details

Page Title

QIP / ICQ — ретро-мессенджер без наворотов

Scan Type

public

Domain Name Analysis

Domain 'qip.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The core label 'qip' covers 3 characters split between one vowel and 2 consonants. Segmentation suggests two words: q, ip. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://qip.ru

Page Load Overview

0.95s
Total Load Time
70 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,426 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network91% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
91%
news media journalism
53%
entertainment media
51%
cryptocurrency blockchain
42%
adult content
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
291.236.136.105Moscow, Moscow, Russia
AS44094Webhost LLC
2193.33.170.175United Kingdom
AS42775Adworlds Technologies Lp
42--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13202D67182D52457A227F0E7FD882B0D3C90C8BFEA67035566F45579BAE34A2C723309

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:rtFe32OSebDKIv5o3kRDflauuyFS1xn9+snOdrIpNL3Nsn:r232OXpRo3kRDflauuAvdIrGn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8455:P1NWIjpSoiGiQMAjIKrIAgBSgJIQAQOswAEQDLcYASSAAAyAEKSgiYpSQxHNALvIKICQFRGBE25urUBggARLRoWAV0FAEKUB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7e7ffe7e7ffff
Perceptual Hash:f3590c674f4c6332
Difference Hash:550c0e4c4c4db68c
Wavelet Hash:000002e6e7e7d7ff
Color Hash:#8c40bf

Scan History

Scan history not available

Unable to load historical scan data