Security Scan Report: e.vg

Redirected to:
https://cq796502.tw1.ru/copilote-s-panel/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 7 domains to perform 22 HTTP transactions. The main domain is e.vg and was registered 12 years ago.

Submitted URL: https://e.vg/XudLqoEQO

Effective URL:
https://cq796502.tw1.ru/copilote-s-panel/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed SG/Société Générale phishing page on cq796502.tw1.ru collecting banking login credentials; Safe Browsing Social Engineering hit. Avoid interaction.

Risk Factors (5)
Brand impersonation of SG / Société Générale on an unrelated domain
Credential collection form requesting client identifier and password/secret code
Redirect from a URL shortener to a separate final host
Google Safe Browsing Social Engineering detection
Single-source phishing threat-intelligence match on e.vg
Domain age information unavailable

Details

Page Title

SG | Connexion

Scan Type

public

Domain Name Analysis

Within the .vg country-code top-level domain, 'e.vg' is registered while skipping any subdomain. Its registrable label 'e' stretches across 1 characters with one vowel and 0 consonants. Splitting it apart reveals one word: e. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://e.vg/XudLqoEQO

Page Load Overview

0.78s
Total Load Time
664 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:993 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking40% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1192.53.96.201St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2212--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FE4363DB519162298D175A6347CC092C9C38DEA38912498EB66F140DAFC6FF8339737B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:RMCMPMCMfMCM8MCMGMCM/MCMtMCMAsptIGMCMPMCMfMCM8MCMGMCM/MCMtMCMAsA:KVrv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57987:hRdoGEgog6QZACGCPZAiECAEqCgaUXKXFiGACzCGKGJpsMh1QoQ8IpCIQABkg4IhEIUA5YlCTTcNwDAQdEJJN7CQhHsgZQBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fff7dffff7ff00
Perceptual Hash:f4d541d718b463c3
Difference Hash:c480072e2c4c0811
Wavelet Hash:00fee086e7e7e700
Color Hash:#4c40bf

Scan History

Scan history not available

Unable to load historical scan data