Security Scan: Уведомление от Минцифры России

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7b170377-b082-4b1c-9f20-de1f901c0dbc Domain and IP registration (RDAP)/api/v1/rdap/7b170377-b082-4b1c-9f20-de1f901c0dbcHow often this domain was scanned/api/v1/domain/stats/yandex-ru-maps-213-moscow-37-617700-755863.surge.sh Scan history for this domain/api/v1/domain/history/yandex-ru-maps-213-moscow-37-617700-755863.surge.sh?limit=15

This website contacted 5 IPs in 3 countries across 3 domains to perform 5 HTTP transactions. The main domain is surge.sh and was registered 12 years ago.

Submitted URL: https://yandex-ru-maps-213-moscow-37-617700-755863.surge.sh/?r=icshay

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Fake Минцифры России breach-notice page on a surge.sh subdomain disguised as a Yandex Maps link. No form here, but it is a scareware lure impersonating a government body and linking to tunnel infrastructure.

Risk Factors (6)

Brand impersonation of a government ministry on a non-official domain

Deceptive hostname mimicking a Yandex Maps link

Alarming false breach notification designed to drive clicks

Subdomain on a free instantaneous hosting platform (surge.sh) with no attributable age

External tunnel infrastructure (ngrok-free.dev, trycloudflare.com) linked to the page

Page text coaches the visitor about phishing while itself being a phishing lure

Domain age information unavailable

Details

Page Title

Уведомление от Минцифры России

Scan Type

public

Domain Name Analysis

Domain 'yandex-ru-maps-213-moscow-37-617700-755863.surge.sh' uses the .sh country-code top-level domain; it also runs on subdomain 'yandex-ru-maps-213-moscow-37-617700-755863'. The registrable portion 'surge' spans 5 characters with 2 vowels and three consonants. Splitting it apart reveals one word: surge. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

30.10s

Total Load Time

33 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:1,252 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service44% confidence

Type: static

Method: ml+structural

All Detected Categories

government public service

44%

phishing scam

41%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	188.166.132.94	Amsterdam, North Holland, Netherlands	AS14061DigitalOcean, LLC
1	104.16.231.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	3.78.102.143Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.16.230.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	63.180.108.122Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
5	5	-	-