Security Scan Report: forum.l2arcana.ru

Site favicon
Submitted: Sep 19, 2026, 8:18:11 AMCompleted: Sep 19, 2026, 8:18:33 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Long-established self-branded Lineage 2 game forum with no credential/payment forms, no brand impersonation, and no Indicators of Compromise, YARA, or IDS hits. Only minor eval() usage and an off-site mega.nz download link.

Risk Factors (2)
4 eval() calls in JavaScript (dynamic code execution) — common in ad/analytics scripts but noteworthy
External download link to mega.nz file (AutoLogin plugin) hosted off-site
Safety Factors (5)
Established domain age (>2 years), minimal risk category
No credential or payment forms on the page
Self-branding consistent with the domain (no impersonation of another entity)
No Indicators of Compromise, YARA, IDS, or threat-intel matches
Legitimate social/ad integrations (VK, Google AdSense, OneAll login)
Domain age information unavailable

Details

Page Title

Arcana - Главная страница

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'forum.l2arcana.ru' is registered with subdomain 'forum'. The registrable portion 'l2arcana' spans 8 characters containing 3 vowels alongside 4 consonants, along with one digit. Segmentation suggests three words: l, 2, arcana. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forum.l2arcana.ru

Page Load Overview

3.20s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:1,919 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1689.127.204.224Falkenberg, Halland County, Sweden
AS48040Fornex Hosting S.L.
2136.243.63.184Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
2142.251.157.119Google · CDNUnited States
AS15169Google LLC
287.240.132.67Russia
AS47541LLC VK
2192.178.183.156Google · CDNUnited States
AS15169Google LLC
2138.249.246.84Stayki, Minsk, Belarus
AS200563Sprinthost.ru LLC
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
287.240.132.78Russia
AS47541LLC VK
2192.178.183.154Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
4817--

Detected Technologies4

SMFv2.0.19
100%
JQueryv1.7
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T125F08B7F9904C644928CEA82C0D5BA458963D25F2944005EF889602FDBC16E6A916949

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hnMEwuiuX4wRZJeRJ+PHaLEgKWgJ+PHaLEg2zRx5vaLEgKWFQqrVG:hMNmVZsRwP6wg5gwP6wg23Mwg5FJVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:562:AAAgAAAAAAAAAAAAAAAAAAAAAIAgAAAAAAEAAAAAQQAAAAAAIAQAAAAAAAAAAgAAAAEAAAABAAAAQAAAAAAAAAAAAAABAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00103c3c3c3c3c3c
Perceptual Hash:c26c6d3c3472d393
Difference Hash:e1e1e9f1e0e1e961
Wavelet Hash:10383c7c3e7c7c3c
Color Hash:#69ac53

Scan History

Scan history not available

Unable to load historical scan data