Security Report: forestbounty.icu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c83ef4b3-4809-40ed-8943-a1c1126e884a Domain and IP registration (RDAP)/api/v1/rdap/c83ef4b3-4809-40ed-8943-a1c1126e884aHow often this domain was scanned/api/v1/domain/stats/forestbounty.icu Scan history for this domain/api/v1/domain/history/forestbounty.icu?limit=15

This website contacted 43 IPs in 2 countries across 29 domains to perform 291 HTTP transactions. The main domain is forestbounty.icu and was registered 3 months ago.

Submitted URL: https://forestbounty.icu

AI Security Verdict

Low Risk

Confidence: 68%

Risk Score

Mushroom-encyclopedia site with genuine content, no credential or payment forms and no impersonation. Only weak signals: young unranked .icu domain, ad-network redirect chain and TLD-based IDS heuristics. Low risk.

Risk Factors (3)

Unranked domain with a 119-day-old registration on a TLD (.icu) frequently abused for spam

16 redirects observed (14 cross-domain) through advertising/SSP endpoints (mc.yandex.com, ads.gpm-ssp.ru, tns-counter.ru, ssp.rutube.ru), which is atypical for a static content site

NETWORK IDS raised TLD-based alerts on the .icu domain

Safety Factors (5)

No credential, password or payment form anywhere on the page

Site displays its own brand only; no impersonation of a third-party brand

Rich, coherent editorial content consistent with the claimed topic

No Indicators of Compromise, hunting rule malware matches, or kit-roster hits

All JavaScript served from the site's own domain; the single external POST target is a public testing API, not an exfiltration endpoint

Domain age information unavailable

Details

Page Title

forestbounty.icu | Энциклопедия грибов + Карта грибных мест

Scan Type

public

Domain Name Analysis

Within the .icu top-level domain, 'forestbounty.icu' is registered without a subdomain. The core label 'forestbounty' covers 12 characters holding 4 vowels versus 8 consonants. Splitting it apart reveals two words: forest, bounty. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.16s

Total Load Time

30.3 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:446,342 chars

Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
39	193.233.89.96	Moscow, Moscow, Russia	AS216246Aeza Group LLC
6	142.251.20.95Google · CDN	United States	AS15169Google LLC
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.248.233.148	Russia	AS51115HLL LLC
6	104.18.66.220Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	109.238.90.239	Russia	AS201706Servicepipe LLC
6	104.18.67.220Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
291	43	-	-