Security Scan Report: img.goodcustomers.ru

Redirected to:
https://app.goodcustomers.ru/auth
Site favicon
Submitted: Oct 7, 2026, 5:54:26 PMCompleted: Oct 7, 2026, 5:55:24 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 55%

2
Risk Score

Self-branded Good Customers sign-in page on an unranked, unknown-age .ru domain. No Indicators of Compromise, malware, impersonation or exfiltration found; no credential form fields parsed. Low risk, but verify the site before entering credentials.

Risk Factors (2)
Login-style page on an unranked domain with unknown registration age hosted on a .ru ccTLD
img.goodcustomers.ru redirects to a different subdomain (app.goodcustomers.ru) for authentication
Safety Factors (4)
Self-branding matches the site's own domain; no impersonation of another organization
No credential/payment form fields parsed from the DOM (password = 0, payment = 0, total forms = 0)
No Indicators of Compromise, no JavaScript malware, no IDS alerts, no kit-roster hits
No cross-origin form submissions or credential exfiltration; all scripts same-origin
Domain age information unavailable

Details

Page Title

Authentification - Good Customers

Scan Type

public

Domain Name Analysis

You're looking at domain 'img.goodcustomers.ru' on the Russian country-code top-level domain (.ru); it also runs on subdomain 'img'. The core label 'goodcustomers' covers 13 characters split between 5 vowels and 8 consonants. Word splitting yields two words: good, customers. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://img.goodcustomers.ru

Page Load Overview

5.04s
Total Load Time
836 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:54 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

government public service39% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
39%
news media journalism
32%
e-commerce shopping
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6951.250.50.130Russia
AS200350Yandex.Cloud LLC
69151.236.118.252Germany
AS204720Global Cloud Network LLC
1382--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T196358EFCF9719AFDBD3EDB2B023825A85C24646BED3556A8F62862441DC366011BC73C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:q4ocTcPvf2QoFRIMgQvf2QoFRIMgMQBgPnG2b9GxPaSNhcQ8S4Bf1yNXn:qPv6FRbv6FRuBgPrbIxPamhcQ8t1yNXn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1117300:ECCYIWEQGCDgMPQEAMQZgDjACAhSUCEMClJZBAUVGoogKSjgArTEAHhzNYawVhSkIAAlUg4orSBCMEPaJLBAgWHJmW6IIQI1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff3f3c3f3e3ff
Perceptual Hash:e4999b6619c66639
Difference Hash:0010a62696260638
Wavelet Hash:03331313c3f3c3f3
Color Hash:#e06c6c

Other Hashes

Crop Resistant:0010a62696260638

Scan History

Scan history not available

Unable to load historical scan data