Security Scan Report: forum.l2arcana.ru

Site favicon
Submitted: Oct 4, 2026, 3:50:19 AMCompleted: Oct 4, 2026, 3:50:58 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Established 3-year-old Lineage 2 gaming forum (SMF) on its own branded domain, no credential/payment forms, no Indicators of Compromise, malware or IDS hits. Only minor caution: an unofficial plugin download linked via mega.nz.

Risk Factors (2)
Link on the forum points to an unofficial plugin download hosted on a third-party file-sharing service (mega.nz) rather than an official vendor
Domain not present in Cisco Umbrella top 1M ranking (weak prior, not evidence of wrongdoing)
Safety Factors (5)
Domain age over 2.5 years (well-established, minimal age risk)
Site displays its own brand (Arcana / L2Arcana.ru) matching its own domain — no impersonation of another entity
No credential, login or payment forms on the page; the single form is an internal search box
No Indicators of Compromise, JavaScript malware, known phishing kit, or network IDS alerts detected
Content is a Russian-language Lineage 2 gaming community forum with rich, long-standing user activity
Domain age information unavailable

Details

Page Title

Arcana - Главная страница

Scan Type

public

Domain Name Analysis

The domain 'forum.l2arcana.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'forum'. Its registrable label 'l2arcana' stretches across 8 characters holding three vowels versus four consonants, plus 1 digit. Segmentation suggests three words: l, 2, arcana. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forum.l2arcana.ru

Page Load Overview

2.97s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:1,964 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media58% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
58%
adult content
49%
cryptocurrency blockchain
36%
healthcare medical
25%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
489.127.204.224Falkenberg, Halland County, Sweden
AS48040Fornex Hosting S.L.
3136.243.63.184Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
3142.251.157.119Google · CDNUnited States
AS15169Google LLC
387.240.132.78Russia
AS47541LLC VK
3142.251.14.154Google · CDNUnited States
AS15169Google LLC
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
387.240.137.164Russia
AS47541LLC VK
3142.251.14.157Google · CDNUnited States
AS15169Google LLC
3142.251.13.132Google · CDNUnited States
AS15169Google LLC
3138.249.246.84Stayki, Minsk, Belarus
AS200563Sprinthost.ru LLC
4916--

Detected Technologies4

SMFv2.0.19
100%
JQueryv1.7
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CBF2D6B3844C1DAA031A6983F0109FC854BF5A7F76616921F8FB2B3DB6D1D93CA190B5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:b5Du1hUbU/Lox211sUZabswPvQWbVNGxOxPKGgZKlQ6lLKILlXqlAWHZKnOlZl/l:VDu3UbU/0e7d0Q8NnyegeVe0QSrK1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34329:E0IsFREQlKYLmS+cSyQdACYBqMAFISNDRCAYJBmkEeAkKLE8Uw5wHGSABoAAiFRpC4sWX3JQAgaAQBgCICldHCJOGNcIOqFM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00103c3c3c3c3c3c
Perceptual Hash:c26c6d3c3472d393
Difference Hash:e1e1e9f1e0e1e961
Wavelet Hash:10383c7c3e7c7c3c
Color Hash:#d22d88

Scan History

Scan history not available

Unable to load historical scan data