Security Scan Report: yarfoto.ru

Submitted: Sep 27, 2026, 1:11:20 PMCompleted: Sep 27, 2026, 1:11:57 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 65%

4
Risk Score

Long-established Russian file-sharing/warez site offering cracked software; Adobe names are content titles, not impersonation. Its own member login is same-origin with no phishing or malware signals — moderate risk from pirated software, not a scam.

Risk Factors (3)
Distributes pirated/cracked commercial software (warez) — illegal content and a common malware vector
Password-protected member login form present on site
Domain unranked in Cisco Umbrella (weak signal only)
Safety Factors (6)
Domain is 12 years old (well-established registration)
No Indicators of Compromise matches against the page or its resources
No YARA JavaScript malware patterns and no obfuscated network sinks
No network-level IDS alerts
Login form is same-origin with no cross-origin credential submission or exfiltration
Physical address signal present
Domain age information unavailable

Details

Page Title

Компьютерный фотомонтаж своими руками. Фотошаблоны, картинки и клипарты для Фотошопа (Photoshop).

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'yarfoto.ru' is registered while skipping any subdomain. The registrable portion 'yarfoto' spans 7 characters with three vowels and four consonants. Segmentation suggests 2 words: yar, foto. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yarfoto.ru

Page Load Overview

3.08s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:15,862 chars
Detector Agreement:60%

Website Classification

Primary Category

entertainment media42% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
42%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.14.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.138Google · CDNUnited States
AS15169Google LLC
4193.3.184.76Russia
AS50214QWARTA LLC
488.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
4142.251.127.84Google · CDNUnited States
AS15169Google LLC
4172.67.159.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.139Google · CDNUnited States
AS15169Google LLC
4193.3.184.133Russia
AS50214QWARTA LLC
4142.251.14.101Google · CDNUnited States
AS15169Google LLC
488.212.201.198Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
6014--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19ED3669211E93AFF05C5A55BD49C3B4A3C91967EEB93660372FF0A99F7E29408B3C050

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:afW880TlSy4mqvvtRdpUJQesw0MFs4j60IUU5NfEXIj4C4hFAq8wLavomDTCvTgC:aO88clS3z1e3OpfEXOYB8c+elF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142550:9U5QABySQCIERDJYJaCzNA0wZAJsPhHAILlUSqrgMxBCBAAlBahAwgKOjmOIAMrPAoACDQoLCMMfoASQDYMAKJhkgEtAR2lS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data