Security Scan Report: yarfoto.ru

Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 7 domains to perform 60 HTTP transactions. The main domain is yarfoto.ru.

Submitted URL: https://yarfoto.ru

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

A 12-year-old Russian Photoshop tutorial/forum site with its own same-origin login. No phishing, IoC, YARA or IDS evidence; the Adobe flag is a false positive. Risk comes only from its indexing of cracked/pirated software.

Risk Factors (3)
Site distributes/indexes pirated and cracked software (RePack, Portable builds, keygens) which commonly carries bundled PUA/malware risk
One password field present as an own-domain forum login - legitimate but a point of interest
Domain unranked in Cisco Umbrella despite 12-year age
Safety Factors (5)
Established domain (over 12 years old)
Scanned page serves no phishing or credential-harvesting form; login is same-origin to its own domain
No Indicators of Compromise, no YARA malware, no IDS alerts
No payment fields and no brand impersonation of another entity
Physical address visible; the Adobe references are subject-matter mentions, not impersonation
Domain age information unavailable

Details

Page Title

Компьютерный фотомонтаж своими руками. Фотошаблоны, картинки и клипарты для Фотошопа (Photoshop).

Scan Type

public

Domain Name Analysis

The domain 'yarfoto.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. The second-level label 'yarfoto' is 7 characters long containing 3 vowels alongside four consonants. Word splitting yields 2 words: yar, foto. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yarfoto.ru

Page Load Overview

2.74s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:13,784 chars
Detector Agreement:60%

Website Classification

Primary Category

entertainment media41% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
41%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12104.21.14.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.127.100Google · CDNUnited States
AS15169Google LLC
4193.3.184.133Russia
AS50214QWARTA LLC
488.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
4142.251.127.84Google · CDNUnited States
AS15169Google LLC
4172.67.159.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.113Google · CDNUnited States
AS15169Google LLC
4193.3.184.76Russia
AS50214QWARTA LLC
4142.251.110.101Google · CDNUnited States
AS15169Google LLC
4193.3.184.135Russia
AS50214QWARTA LLC
6013--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E9A374B211E935FF05819596D8983B4E3DD2867FEF57220372FE09A9B7E3990CA2C144

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:afW880T5iyYmEvOt/3ppJQesr0teesnCjFhUhaxfEXIjs04hFAqr9KWMJxLZ1Bxx:aO88c5iLU0eFPdfEXOOBrZf+elM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:99908:Q0fUR+gICAAFBJEQOF0oBwDADyDbJRgLCGwyZLmFLjcAwBA1lExQwkPAAEswBWJCABCVBMQZCIdGIM/AERAACAkKI3G6UAxB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data