Security Scan: EasyWeb Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6b1a40b1-6a3a-40b0-b86c-ae041491a5e1 Domain and IP registration (RDAP)/api/v1/rdap/6b1a40b1-6a3a-40b0-b86c-ae041491a5e1How often this domain was scanned/api/v1/domain/stats/cp552296.tw1.ru Scan history for this domain/api/v1/domain/history/cp552296.tw1.ru?limit=15

This website contacted 5 IPs in 4 countries across 5 domains to perform 44 HTTP transactions. The main domain is tw1.ru and was registered 20 years ago.

Submitted URL: https://cp552296.tw1.ru/core/client/td/

The Cisco Umbrella rank of the primary domain is #163,229 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Confirmed TD Bank phishing page: 'EasyWeb' banking login harvesting username and password on the non-TD host cp552296.tw1.ru, flagged twice by Safe Browsing for social engineering.

Risk Factors (5)

Bank brand impersonation (TD Canada Trust / EasyWeb) on a non-TD domain

Credential collection form (username + password) on an unrelated host

Google Safe Browsing Social Engineering detections (2)

Page references TD-specific security branding and anti-fraud language to build false trust

Free/shared hosting subdomain used to host a financial login page

Domain age information unavailable

Details

Page Title

EasyWeb Login

Scan Type

public

Favicon Hash

MMH3: 1301003845

MD5: f5b6840232a6dfcd1d47d429ecabfdef

Domain Name Analysis

You're looking at domain 'cp552296.tw1.ru' on the Russian country-code top-level domain (.ru), featuring subdomain 'cp552296'. The registrable portion 'tw1' spans 3 characters holding zero vowels versus 2 consonants, notching 1 digit. Splitting it apart reveals 2 words: tw, 1. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.37s

Total Load Time

458 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-CA

Text Length:2,627 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

59%

finance banking

33%

government public service

29%

documentation technical

29%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	92.53.96.201	St Petersburg, St.-Petersburg, Russia	AS9123Jsc timeweb
8	74.144.67.142Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
8	91.235.132.198	United States	AS30286ThreatMetrix Inc.
8	91.235.132.130	United States	AS30286ThreatMetrix Inc.
8	23.50.131.151Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
44	5	-	-