cv688513-wordpress-u544a[.]tw1[.]ru
“Домен припаркован в Timeweb”
cv688513-wordpress-u544a.tw1.ru — 未验证. 品牌冒充:Wordpress; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 8/91 (ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, Fortinet); CF Radar malicious; PhishDestroy score 74/100. 注册商: TW-Cloud (ASN: 9123).
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain cv688513-wordpress-u544a.tw1.ru hosted a page titled "Домен припаркован в Timeweb" (Domain parked at Timeweb) and was classified as an impersonation scam targeting the WordPress brand. This type of threat typically aims to deceive users into believing they are interacting with a legitimate WordPress-related service, potentially leading to credential theft or malware distribution.
Technical evidence from the provided data shows the domain was flagged by 8 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, and Fortinet. It appeared on 2 blocklists. The domain was registered through TW-Cloud (AS9123 JSC TIMEWEB) and resolved to IP address 92.53.96.105 in Russia. The SSL certificate was issued by GlobalSign nv-sa / GlobalSign GCC R3 DV TLS CA 2020. Nameservers were ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, and ns4.timeweb.org.
The domain is currently DOWN/OFFLINE. GridinSoft trust rating is 0 out of 100, indicating no trust. The DOM risk score is 40, suggesting a moderate threat level. Based on available data, the site poses a risk due to impersonation and low trust metrics, though it is no longer active.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。