Security Scan Report: forum.qrz.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 37 IPs in 5 countries across 26 domains to perform 302 HTTP transactions. The main domain is qrz.ru and was registered 26 years ago.

Submitted URL: https://forum.qrz.ru

The Cisco Umbrella rank of the primary domain is #176,784 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Long-established Russian amateur-radio forum (QRZ.RU) with its own account login. No impersonation, no credential or payment harvesting, and the only threat-intel hit is a single-source reputation tag on an unrelated third-party address.

Risk Factors (1)
7 redirects detected (6 cross-domain) during capture — mild anomaly, non-malicious causes common
Safety Factors (5)
~26-year-old established domain (registered 2000)
Self-branding consistent with the domain name — no brand impersonation
No credential/payment harvesting: 0 disguised password fields, 0 payment fields, no cross-origin credential forms
No JavaScript malware, no malicious YARA/kit-roster hits, no IDS alerts, no credential exfiltration
13 third-party script hosts, all ranked in top-1M popularity
Domain age information unavailable

Details

Page Title

Форум QRZ.RU

Scan Type

public

Domain Name Analysis

The domain name 'forum.qrz.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'forum'. The core label 'qrz' covers 3 characters containing 0 vowels alongside 3 consonants. Segmentation suggests 2 words: qr, z. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forum.qrz.ru

Page Load Overview

75.10s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:30,253 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical79% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
79%
social_media
35%
forum
35%

Detected Features

Login Form
Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1462.181.46.36Russia
AS28968JSC Evrasia Telecom Ru
8178.104.21.52Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
837.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
877.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
8142.251.110.157Google · CDNUnited States
AS15169Google LLC
8213.186.33.19France
AS16276OVH SAS
854.197.96.203Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
862.181.46.37Russia
AS28968JSC Evrasia Telecom Ru
894.139.255.28Asbest, Sverdlovsk Oblast, Russia
AS208677Cloud.ru
890.156.233.120Russia
AS47764LLC VK
30237--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11415EA1BE5E21B33829585E091633B7C3B7D8D2D8FC20C7569AB2B7E1B86DE2170518D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:knVBrQ+SgezGxVm/imSCgMdIbZVtxOCZhtxOdZEtMOv1Is74JS5gzqmQi8nFqCgk:Lp6z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:924285:RhgKGAD4AZaCAGjMNEw25yAIbuhkHFAWhEYkEAKQFNgAmsUCyQoxBKukASKyeABKUxFANcViAoQQFDAA4AEsBQDUnXnUbM5J

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:002727f7ffffffff
Perceptual Hash:a7267859583d2727
Difference Hash:37cdcc4d9292929a
Wavelet Hash:00030300ffffff69
Color Hash:#d0e06c

Scan History

Scan history not available

Unable to load historical scan data