Security Scan Report: cy060322.tw1.ru

Redirected to:
https://vh470.timeweb.ru/parking/?ref=cy060322.tw1.ru
Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 11 domains to perform 55 HTTP transactions. The main domain is tw1.ru and was registered 20 years ago.

Submitted URL: http://cy060322.tw1.ru/l1nc0in.php

Effective URL:
https://vh470.timeweb.ru/parking/?ref=cy060322.tw1.ru
Redirected

The Cisco Umbrella rank of the primary domain is #163,229 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

Scanned URL is flagged by two feeds as a DCRat malware endpoint on a free subdomain; it now redirects to a generic Timeweb parking page. Do not visit the original URL.

Risk Factors (3)
Multi-source corroborated content-malware Indicators of Compromise matching the exact URL scanned (DCRat)
PHP endpoint on a free-subdomain namespace used as a malware staging path
Redirect chain ending on shared hosting (Timeweb) with the original payload no longer resolving
Safety Factors (4)
Final landing page is the genuine Timeweb parking page, not a credential-harvesting page
No JavaScript malware patterns, no hunting-rule hits, no IDS alerts, no credential exfiltration detected
Page contains no password or payment fields
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Домен припаркован в Timeweb

Scan Type

public

Domain Name Analysis

You're looking at domain 'cy060322.tw1.ru' on the Russian country-code top-level domain (.ru) and includes subdomain 'cy060322'. The core label 'tw1' covers 3 characters with zero vowels and 2 consonants, along with one digit. Word splitting yields two words: tw, 1. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

timeweb Домен .ги / .рф в подарок При оп тинга на год Оплатить хостинг нагод > © домен припаркован ем/еБ > cy060322.tw1.ru Разместите свой сайт в Timeweb Timeweb - компания, которая размещает пр...

Page Load Overview

5.28s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:96%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,717 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ru

All Detected Languages

🇷🇺ru(96%)🇧🇬bg(4%)

Website Classification

Primary Category

corporate business45% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
45%
technology software
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1392.53.96.169St Petersburg, St. Petersburg, Russia
AS9123Jsc timeweb
977.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
937.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.150.119Google · CDNUnited States
AS15169Google LLC
377.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
3142.251.150.120Google · CDNUnited States
AS15169Google LLC
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
3142.251.152.119Google · CDNUnited States
AS15169Google LLC
5516--

Detected Technologies1

JQueryv2.1.3
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17863C7E701F0D0E14A4FC3B19D365A9B9D7624BFDE81928479DC0A507F92DF58883AAC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:bfELFlrV2Pdq9H40PxiHm/ouVHHMjEENRzibLIN0:bfqV2Pdq9H40AupMV6LIG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72927:GYkRfwQBD4gCroIgRlUUBwQgEoAwABKvbNgARzQUpgxCIwAjkkRIogTAMMDCQYPMRAxVCFYbkLISAfwIAhwQCZUASQ4jCgxA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:818181ffffffffff
Perceptual Hash:ba3b3ac0c5c5c5c5
Difference Hash:2b2b0b36e0c0b8e8
Wavelet Hash:000080807f7fffff
Color Hash:0e002006040

Scan History

Scan history not available

Unable to load historical scan data