ScanMalware.com

Security Scan Report: ri.gop

Redirected to:
https://ri.gop/?ki-cf-botcl=1
Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f461b505-db85-43c2-a3c0-9e5c289a77b3Domain and IP registration (RDAP)/api/v1/rdap/f461b505-db85-43c2-a3c0-9e5c289a77b3How often this domain was scanned/api/v1/domain/stats/ri.gopScan history for this domain/api/v1/domain/history/ri.gop?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is ri.gop and was registered 11 years ago.

Submitted URL: https://ri.gop/

Effective URL:
https://ri.gop/?ki-cf-botcl=1
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

2
Risk Score

Content gated by a Cloudflare bot challenge, so the real page could not be assessed. With an 11-year-old domain and no threat-intel, YARA, or IDS hits, no malicious signal is present; verdict is low-risk with data limits noted.

Risk Factors (1)
Page content could not be verified because the capture was gated behind a bot-protection challenge, so the real site's behavior remains unknown — this is an evidence gap, not proof of wrongdoing
Safety Factors (4)
Established domain (~11 years old, registered 2015)
No Indicators of Compromise, YARA malware, kit-roster, or IDS/Suricata hits
No cross-origin form submissions and no credential-exfiltration behavior observed
The only third-party host is Cloudflare's own challenge service
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain 'ri.gop' uses the .gop top-level domain and has no subdomain. Count 2 characters in 'ri' containing one vowel alongside 1 consonant. Breaking it apart gives one word: ri. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ri.gop/

Page Load Overview

0.94s
Total Load Time
1001 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:366 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
73%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BAD22B72EB08225F552786EF7A90FB84123062A15616777EFCE636648FC905A39333C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:zx6FoWGzWe5P1i2ene4qrWZaTRAaZHINSFEa8pBfeqGhBQ7xbDSn:MmRDqjyWZatAaZHINSFQT2qGhqon

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29075:HHXnKSKyILLEItDQBEAGgAERBA8bAgWAACFJINIAS8BjKBNQHCEziUBsaLqFQBQD4spJoZggOThojlNEZEFgCAWwiQiAAAFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3ffffffffe7
Perceptual Hash:b83830cec7c7c7c1
Difference Hash:209e16100000000c
Wavelet Hash:3c000c2c0f0f3f03
Color Hash:#b6c587

Other Hashes

Crop Resistant:209e16100000000c

Scan History

Scan history not available

Unable to load historical scan data