Security Scan Report: forums.tdiclub.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 8 domains to perform 45 HTTP transactions. The main domain is tdiclub.com and was registered 26 years ago.

Submitted URL: https://forums.tdiclub.com/index.php?threads%2Fdyed-diesel-not-actually-dyed.295154%2F=

The Cisco Umbrella rank of the primary domain is #550,537 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Established 26-year-old VW TDI enthusiast forum displaying its own brand, with no credential/payment forms, no IoC, YARA, IDS or behavioral signals. Legitimate community site.

Safety Factors (4)
Domain age 9834 days with 26 years of continuous operation
Content is a genuine discussion forum with rich, coherent topic structure (TDI maintenance, fuels, model-specific areas)
No credential or payment collection; PayPal donation button points to the legitimate paypal.com donate endpoint
No threat-intelligence, YARA, IDS or behavioral signals
Domain age information unavailable

Details

Page Title

TDIClub Forums

Scan Type

public

Domain Name Analysis

The domain name 'forums.tdiclub.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'forums'. The second-level label 'tdiclub' is 7 characters long containing two vowels alongside five consonants. Tokenizing the label suggests 2 words: tdi, club. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forums.tdiclub.com/index.php?threads%2Fdyed-diesel-not-actually-dyed.295154%2F=

Page Load Overview

1.93s
Total Load Time
824 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:22,012 chars
Detector Agreement:100%

Website Classification

Primary Category

forum50% confidence
Type: dynamic
Method: structural

All Detected Categories

forum
50%
corporate
50%

Detected Features

Comments
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.67.178.156Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
4104.21.17.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4168.235.70.216Piscataway, New Jersey, United States
AS3842InMotion Hosting, Inc.
4104.18.6.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.100Google · CDNUnited States
AS15169Google LLC
4104.17.207.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4104.18.7.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.102Google · CDNUnited States
AS15169Google LLC
4511--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF244011648D5E7B002303D764687B9831EF9FB0E2AA04E5F5B70ABE4EC6C95B98F153

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:PwA5RNM6Ki5HJGqe864sixX2h1mCqqVx/S:PwA5g6K2JGW4Lz3S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:211194:wAygGA5wAtQA0EIAgFoIOkpGsUkgIYkygDgJECCSNFTsuAczAGJELQGBCg4lkkIG0SgeCQA1c4KZQjPY6QWwAaoAgAA1ELCQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f9f9ffffffffe7
Perceptual Hash:c7493314364f674d
Difference Hash:c52bebe9ecece40c
Wavelet Hash:00187070777777e7
Color Hash:#40bf51

Scan History

Scan history not available

Unable to load historical scan data