ScanMalware.com

Security Scan Report: lemoncraft.ru

Site favicon
Submitted: Sep 29, 2026, 12:04:17 AMCompleted: Sep 29, 2026, 12:06:40 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/60d80aaa-621b-41fa-9cd3-e052decc5d25Domain and IP registration (RDAP)/api/v1/rdap/60d80aaa-621b-41fa-9cd3-e052decc5d25Certificate Transparency/api/v1/ct/lemoncraft.ruHow often this domain was scanned/api/v1/domain/stats/lemoncraft.ruScan history for this domain/api/v1/domain/history/lemoncraft.ru?limit=15

This website contacted 44 IPs in 3 countries across 34 domains to perform 489 HTTP transactions. The main domain is lemoncraft.ru and was registered 21 years ago.

Submitted URL: https://lemoncraft.ru

The Cisco Umbrella rank of the primary domain is #963,764 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

1
Risk Score

Established 21-year-old Russian Minecraft server community on its own domain, self-branded, with an ordinary account login protected by reCAPTCHA. No impersonation, Indicators of Compromise, or malware evidence.

Safety Factors (6)
Domain age 7916 days (registered 2005) — long-established
Self-branded site (title/meta match domain), no impersonation of another entity
No credential exfiltration; no cross-origin form submissions
Only analytics/advertising scripts (VK, Yandex, Google, Mail.ru) contact external hosts
Network IDS alerts are INFO-level DDoS-Guard hosting heuristics, not phishing/malware alerts
Legitimate community features: launcher downloads, Discord invite, forums, server status list
Domain age information unavailable

Details

Page Title

LemonCraft - Сервера Майнкрафт с модами!

Scan Type

public

Domain Name Analysis

The domain name 'lemoncraft.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'lemoncraft' spans 10 characters containing 3 vowels alongside seven consonants. Word splitting yields two words: lemon, craft. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lemoncraft.ru

Page Load Overview

90.12s
Total Load Time
10.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:5,491 chars
Detector Agreement:80%

Website Classification

Primary Category

social media network98% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
98%
forum community discussion
96%
blog personal website
92%
entertainment media
91%
adult content
86%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16186.2.163.108Netherlands
AS59692IQWeb FZ-LLC
11142.251.14.97Google · CDNUnited States
AS15169Google LLC
11142.251.154.119Google · CDNUnited States
AS15169Google LLC
1187.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
11142.251.110.95Google · CDNUnited States
AS15169Google LLC
11142.251.127.94Google · CDNUnited States
AS15169Google LLC
1188.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
1187.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
11142.251.110.94Google · CDNUnited States
AS15169Google LLC
11142.251.14.100Google · CDNUnited States
AS15169Google LLC
48944--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B213D832B95734930307B0C1F4223B0D70ABD6BEFE438D6575AD71AA2FCBDA5562A044

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:a1uwpFEukJorbqEvSN2HQUBnkPyrvZmbNcCqv93Uvxavq3RhePqqv7tC7VlR0bjA:a1uwvXkJo/7HQUBnkPy4bNcCS8PU87Vd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45387:CigIE0GMTkQhQ8EACAJgTA6BBEgGEn1RLIDR00XEABShRgAS4o0UTHAyZDOUQYELCiElCBx4FxRwEAICWKncSoIKBQAAgJAU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data