Security Scan: Домен припаркован в Timeweb

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8298a2cc-b7bb-4d54-873a-aaeb1b14a04f Domain and IP registration (RDAP)/api/v1/rdap/8298a2cc-b7bb-4d54-873a-aaeb1b14a04fHow often this domain was scanned/api/v1/domain/stats/ck077996.tw1.ru Scan history for this domain/api/v1/domain/history/ck077996.tw1.ru?limit=15

This website contacted 12 IPs in 2 countries across 11 domains to perform 61 HTTP transactions. The main domain is tw1.ru and was registered 20 years ago.

Submitted URL: http://ck077996.tw1.ru/l1nc0in.php

Effective URL:

https://vh470.timeweb.ru/parking/?ref=ck077996.tw1.ru

Redirected

The Cisco Umbrella rank of the primary domain is #163,229 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 85%

Risk Score

The scanned PHP endpoint is flagged as dcrat malware by two independent threat feeds; it now redirects to a Timeweb parking page, but the URL itself is a known malware indicator and should not be visited.

Risk Factors (2)

URL-level content-malware indicator (dcrat) corroborated by two independent threat-intel feeds

Randomly named PHP endpoint on a free instant-subdomain hosting namespace, typical of malware staging/dropper URLs

Safety Factors (5)

No JavaScript malware patterns, no IDS alerts, no credential exfiltration detected on the captured page

No login, password or payment fields present

Final landing page is a genuine Timeweb hosting parking page with real company contact details and legal registration

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

Домен припаркован в Timeweb

Scan Type

public

Favicon Hash

MMH3: -2073646073

MD5: eec13f2e140862aad59b1fe0ae1b9d3e

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'ck077996.tw1.ru' is registered and includes subdomain 'ck077996'. Its registrable label 'tw1' stretches across 3 characters holding 0 vowels versus 2 consonants, notching one digit. Word splitting yields two words: tw, 1. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.46s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:60%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,717 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as ru

Website Classification

Primary Category

corporate business46% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

corporate business

46%

technology software

30%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	92.53.96.169	St Petersburg, St. Petersburg, Russia	AS9123Jsc timeweb
5	142.250.154.95Google · CDN	United States	AS15169Google LLC
5	142.251.152.119Google · CDN	United States	AS15169Google LLC
5	5.255.255.77Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
5	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	37.9.64.225Yandex · CLOUD	Russia	AS13238YANDEX LLC
5	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
5	142.251.150.119Google · CDN	United States	AS15169Google LLC
5	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
61	12	-	-