ScanMalware.com

Security Scan Report: uhoplan.ru

Site favicon
Submitted: Oct 3, 2026, 5:36:49 AMCompleted: Oct 3, 2026, 5:37:47 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

Long-established (12-year) Russian entertainment portal with its own same-origin login; no impersonation, no Indicators of Compromise, no malware. Low risk despite ad-heavy redirects.

Risk Factors (3)
6 redirects (5 cross-domain) observed during capture
Unranked third-party script hosts load on the page (gsimvqfghc.com, zchnk.ru, static.advcake.com) — noted but no tampering/inserted-content evidence
Site distributes pirated media/courses, a legal rather than security concern
Safety Factors (5)
Well-established domain (4621 days old, risk category WELL_ESTABLISHED)
Self-branding matches domain — not typosquatting or brand impersonation
No Indicators of Compromise, no YARA malware, no known malicious kit
No cross-origin credential form and no credential exfiltration detected
Cross-origin JS targets are mainstream ad/analytics/CDN endpoints (Yandex, MTS, Rambler, Adriver, Sape, Cloudflare)
Domain age information unavailable

Details

Page Title

Ухоплан - Хорошее настроение и интересный, полезный контент в сети

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'uhoplan.ru' is registered with no subdomain. The core label 'uhoplan' covers 7 characters with three vowels and four consonants. Word splitting yields three words: u, ho, plan. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://uhoplan.ru

Page Load Overview

3.14s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:9,663 chars
Detector Agreement:80%

Website Classification

Primary Category

social media network84% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
84%
entertainment media
79%
technology software
78%
education learning
77%
healthcare medical
70%

Detected Features

Login Form
Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
491.218.113.108Moscow, Moscow, Russia
AS50867Hostkey B.v.
4109.235.165.222Russia
AS43247YooMoney NBCO LLC
4188.72.103.4Dubai, Dubai, United Arab Emirates
AS215013Yandex.Cloud LLC
4142.251.20.100Google · CDNUnited States
AS15169Google LLC
4193.3.184.47Russia
AS50214QWARTA LLC
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
45.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
20050--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5D3836245CEB83E0226D1D5D0603B0C70AB067FEE954D16B1FD182EBFF2F91AC1659A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:didhWdZAPuKJ3OEBW17vlgUL7lOfclMzwiOlcOBuFlCzPylU/ClkTS8lI87/Gpll:didhl3Omt8dt81tSlpeLupy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142151:C5BEY7pSkKHgSEQAmkAAIeEUDSYBAohAAJJOpYRODAx6AqAAJJFKKODlHGAw0ARBaAEowiYDoJZJCcE8pahjQJCIAOQRAALi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:9b0202335eebeae9
Difference Hash:e9fccb3b1a9a9b33
Wavelet Hash:000049ffcfefef01
Color Hash:#7997d2

Other Hashes

Crop Resistant:e9fccb3b1a9a9b33,9cdddddcdc4e29ec,a989a9f9fcfcfcdc

Scan History

Scan history not available

Unable to load historical scan data