Security Scan Report: rf-cheats.ru

Redirected to:
https://www.rf-cheats.ru/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 42 IPs in 3 countries across 32 domains to perform 152 HTTP transactions. The main domain is rf-cheats.ru and was registered 19 years ago.

Submitted URL: https://rf-cheats.ru

Effective URL:
https://www.rf-cheats.ru/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 75%

4
Risk Score

Long-established Russian gaming cheat forum with its own same-origin login; no phishing, impersonation, or malware indicators found, but it markets cheat/anti-cheat bypass software, so downloads warrant caution.

Risk Factors (2)
Distributes and solicits development of game cheats and anti-cheat bypass tools, which carry malware/PUP risk for downloaders
Advertises a 'black market' and custom cheat commissions for multiple MMOs
Safety Factors (5)
Domain is approximately 19 years old and well-established
Self-branding: title and meta match the rf-cheats.ru domain; no impersonation of another brand
Login form is the site's own forum authentication, same-origin, with CSRF/securitytoken fields and no exfiltration
No threat-intelligence matches against the page or its loaded resources
No JavaScript malware, no payment fields, no disguised password fields
Domain age information unavailable

Details

Page Title

Форум читеров RF-Cheats.ru

Scan Type

public

Domain Name Analysis

You're looking at domain 'rf-cheats.ru' on the Russian country-code top-level domain (.ru) with no subdomain. The registrable portion 'rf-cheats' spans 9 characters with 2 vowels and 6 consonants; it also includes 1 hyphen. Word splitting yields 2 words: rf, cheats. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rf-cheats.ru

Page Load Overview

75.11s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:22,132 chars
Detector Agreement:60%

Website Classification

Primary Category

forum community discussion96% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum community discussion
96%
entertainment media
67%
technology software
61%
social media network
50%
adult content
38%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2962.173.140.120Russia
AS34300Internet-Cosmos LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
345.43.142.2United Kingdom
AS16276OVH SAS
387.240.185.136Russia
AS47541LLC VK
387.240.185.165Russia
AS47541LLC VK
393.186.227.168Russia
AS47541LLC VK
387.240.185.148Russia
AS47541LLC VK
3185.178.210.193Russia
AS57724Ddos-guard Ltd
331.25.227.146Moscow, Moscow, Russia
AS56528Big Mmo Game Network Limited
387.240.190.77Russia
AS47541LLC VK
15242--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195F3C6A005CD656F1102A0DBF121BF49A9FB08BEFF73465173FE1D3BBAD29189024669

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hUM2bxEtnKxA15wS964womN2MHv5yh2ulZExfoXvSTTuyAOc3YQ4rm7ZLzHmXFEm:h9KxgwO64pmN2kv5xulZExfoXvSTTuyb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166537:EECJUmKxLCWKSYKENABowIDpVkVFUHETBCEQUxFSnUMQJMAAoGEiVMihhCGAH5uzJJD1KEoyxwDoFbTEAlUNEZFGAWgEwIQM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data