Security Scan Report: runelitepluginhub.net

Redirected to:
https://runelite.net/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 33 HTTP transactions. The main domain is runelitepluginhub.net and was registered 1 week ago.

Submitted URL: https://runelitepluginhub.net

Effective URL:
https://runelite.net/
Redirected

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Page rendered is the genuine RuneLite site reached via a lookalike domain that has a single-source 'Unknown Stealer' report; reach runelite.net directly and avoid the redirecting host.

Risk Factors (2)
Single-source, unverified threat-intel report labeling the entry domain runelitepluginhub.net as an 'Unknown Stealer' — potential malware-distribution history on a domain that mimics the RuneLite name
Entry host is a brand-lookalike domain (runelitepluginhub.net) that is not the official RuneLite domain and simply redirects to it, a pattern common to malware-lure domains
Domain age information unavailable

Details

Page Title

RuneLite - Open Source Old School RuneScape Client

Scan Type

public

Domain Name Analysis

The domain 'runelitepluginhub.net' uses the network infrastructure generic top-level domain (.net) without a subdomain. Its registrable label 'runelitepluginhub' stretches across 17 characters holding seven vowels versus 10 consonants. Breaking it apart gives 4 words: run, elite, plugin, hub. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

RL Features Blog Pulse. = Wiki.» Tags Tile markers Plugin Hub Becomeapatron Gl Ww © > 5 ww a 3 ‘| | weil < WY = RUNELITE.NET A popular free, open-source and super fast client for Old School RuneSc...

Page Load Overview

1.57s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,274 chars
Detector Agreement:95%

Website Classification

Primary Category

technology software68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
68%
news media journalism
42%
social media network
25%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25104.26.8.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6167.148.88.68New York, New York, United States
AS398256Ultahost, Inc.
6140.82.121.6Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
4172.67.74.139Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.9.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CE82B57AA700E43B0623DDC7B819B218A092113FCE164A6DF2FDD19D1F99D80952FA5F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:w8sjn3DUezXjD10wjRItnk5JxPWaHkXFWs:w8sjnTdzXjD10w9Itk5JxPWaHCFWs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17686:JBGy7UJSghUTzqXhoWhKCtQpKAlhEEwHkBAKwhjQAENAtDEAgAASQBsEAaAcZgo5YEHDgAKA1EgiRpsFgoItBpyKQkKRFASI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cb269b7d390d0707
Perceptual Hash:8ad53462c2b979ad
Difference Hash:96d433d9e1d9f7ef
Wavelet Hash:cb2e9b3d39190707
Color Hash:38010001400

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data