Security Scan Report: t.co

Redirected to:
blob:https://firebasestorage.googleapis.com/0d932bbc-09b8-40c4-8481-43...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 3 HTTP transactions. The main domain is t.co and was registered 16 years ago.

Submitted URL: https://t.co/UTJrhJCRhG

Effective URL:
blob:https://firebasestorage.googleapis.com/0d932bbc-09b8-40c4-8481-43...
Redirected

The Cisco Umbrella rank of the primary domain is #1,176 of the top 1 million websitesTop 10K Site

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake 'human verification' page impersonating Microsoft Teams that lures users into downloading a ScreenConnect .exe disguised as a document — malicious remote-access payload; do not download or run.

Risk Factors (5)
Deceptive executable download disguised as a document ('Download Document' → .exe)
Remote-access tool (ScreenConnect) delivery consistent with RAT/tech-support-fraud infrastructure
Brand impersonation of Microsoft Teams on a non-Microsoft cloud-blob URL
Fake human-verification CAPTCHA used as a social-engineering gate
Short-link redirect chain obscuring the true destination
Domain age information unavailable

Details

Page Title

Report

Scan Type

public

Domain Name Analysis

You're looking at domain 't.co' on the Colombian country-code top-level domain (.co) with no subdomain. The registrable portion 't' spans 1 characters split between zero vowels and one consonant. Splitting it apart reveals 1 word: t. No strong language cues emerged from the frequency lists.

Screenshot

Verify you are human I'm not a robot Click the checkbox to continue Microsoft Teams Privacy «Terms,

Page Load Overview

1.20s
Total Load Time
25 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:330 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service48% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
48%
documentation technical
47%
healthcare medical
47%
news media journalism
43%
technology software
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3162.159.140.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.217.119.4Google · CDNUnited States
AS15169Google LLC
0104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.217.114.4Google · CDNUnited States
AS15169Google LLC
34--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F22317B56A300617C2764A52FE797857661D003E207CD583EDCD258CF8EBE4A863B8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BrQk7OZqvcK2Ug+PH/e4sfxMBNuKLDVSiyiZiB7B/2Jd2:BrMYxgiyiZiBR2JI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10096:AGAGVASh1xIWGACqlaGiAwAEAA0zCUoAJpTSIuMgDkhroBTbEzIJB0AQmQBlSQhwAAoIgSYIFhKFD+kAQM0FCLAElAnBTQMQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000818000000
Perceptual Hash:993366cc993366cc
Difference Hash:0000001a12000000
Wavelet Hash:c0c0c0c8f8f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:0000001a12000000

Scan History

Scan history not available

Unable to load historical scan data