Security Scan Report: form.twoto.one

Submitted: Apr 24, 2026, 9:14:16 AMCompleted: Apr 24, 2026, 9:15:27 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is form.twoto.one and was registered NaN years ago.

Submitted URL: https://form.twoto.one/login

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site hosts a login form on a relatively new, unranked domain with heavily obfuscated JavaScript; moderate risk, proceed cautiously.

Risk Factors
Newish domain (<6 months) with credential collection form
Highly obfuscated JavaScript code
Unranked domain indicating low reputation
Safety Factors
Self‑branding matches the domain (no brand impersonation)
No malicious Indicators of Compromise or YARA matches detected
No network IDS alerts or credential exfiltration observed
Domain age information unavailable

Details

Page Title

Sign in | Two To One - Form Builder

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(88%)

Domain Information

You're looking at domain 'form.twoto.one' on the .one top-level domain, featuring subdomain 'form'. Count 5 characters in 'twoto' with 2 vowels and 3 consonants. Splitting it apart reveals two words: two, to. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://form.twoto.one/login

Page Load Overview

3.10s
Total Load Time
36
HTTP Requests
1
Domains
328 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:701 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software88% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
88%
corporate business
63%
finance banking
56%
news media journalism
46%
government public service
30%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3645.90.120.126Karlsruhe, Baden-Wurttemberg, Germany
AS51167Contabo GmbH
361--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BBD2513634F0043BC783A2C177B6B709AF66A507D84A845AB6AD4BDC5F92DD0CC63719

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:fyCQzb8yCnl0s5B599pdtt92gmij53RjmYqQ6RpYEGOwy4CDsEXWY/0l:6/zb780s5B599pdtt9d553Rj+Yesf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30949:IBAIIABAqAgAECCk2QiFjHiAI4CKyDBiYCCAEEiFClHQSwG9GBYDYMrTJJYigCS2DCA1BB6AAlAgEHAQgPEwSCBACKAJCB8x

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcf0f0f0f0f0f0ff
Perceptual Hash:e6d2995899d39958
Difference Hash:6005646c25250547
Wavelet Hash:fce0e0e0f0f0f0f1
Color Hash:#9053ac

Scan History

Scan history not available

Unable to load historical scan data