Security Report: cq796502.tw1.ru - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5a6b29cc-ccf1-42da-97d8-e993236aeacf Domain and IP registration (RDAP)/api/v1/rdap/5a6b29cc-ccf1-42da-97d8-e993236aeacfHow often this domain was scanned/api/v1/domain/stats/cq796502.tw1.ru Scan history for this domain/api/v1/domain/history/cq796502.tw1.ru?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 21 HTTP transactions. The main domain is tw1.ru and was registered 20 years ago.

Submitted URL: https://cq796502.tw1.ru/copilote-s-panel/

The Cisco Umbrella rank of the primary domain is #163,229 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed Société Générale phishing page on tw1.ru free hosting: fake 'Espace Client' login harvesting client code and password, plus a Google Safe Browsing Social Engineering hit. Do not enter credentials.

Risk Factors (5)

Impersonation of Société Générale branding and login flow on an unrelated tw1.ru subdomain

Credential harvesting form (client code + password) submitted to a self-hosted send.php endpoint

Google Safe Browsing Social Engineering (phishing) detection

Hosted on a free/shared hosting subdomain inconsistent with a major bank

Anonymous, low-reputation domain with no legitimate connection to the impersonated brand

Domain age information unavailable

Details

Page Title

SG | Connexion

Scan Type

public

Favicon Hash

MMH3: 1397726610

MD5: ca10c09aeaf43460d3760f50c608eb51

Domain Name Analysis

Domain 'cq796502.tw1.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'cq796502'. The registrable portion 'tw1' spans 3 characters holding 0 vowels versus two consonants; it also includes 1 digit. Segmentation suggests 2 words: tw, 1. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.70s

Total Load Time

663 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:47%

Script:Latin

Direction:ltr

Detection Details

Text Length:993 chars

Detector Agreement:67%

Website Classification

Primary Category

finance banking40% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

40%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	92.53.96.201	St Petersburg, St.-Petersburg, Russia	AS9123Jsc timeweb
2	104.16.180.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	142.250.154.94Google · CDN	United States	AS15169Google LLC
2	104.16.179.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	9	-	-