Security Scan Report: t.co

Redirected to:
blob:https://firebasestorage.googleapis.com/f22e3d0d-8c7a-4124-ab3f-fc...
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 6 domains to perform 8 HTTP transactions. The main domain is t.co and was registered 16 years ago.

Submitted URL: https://t.co/FB8SGuxihG

Effective URL:
blob:https://firebasestorage.googleapis.com/f22e3d0d-8c7a-4124-ab3f-fc...
Redirected

The Cisco Umbrella rank of the primary domain is #1,176 of the top 1 million websitesTop 10K Site

AI Security Verdict

Confirmed Scam

Confidence: 93%

10
Risk Score

Fake Google Meet page on a Firebase blob that lures a 'verify you are human' click and pushes a Windows executable, with ScreenConnect RMM contact. Malware distribution — do not interact.

Risk Factors (8)
Brand impersonation of Google Meet on a non-Google hosting path
Critical IDS alert for Windows PE EXE/DLL download
Packed executable download
ScreenConnect remote monitoring/management tool contacted — remote access capability
Fake human-verification checkbox acting as a download trigger
Fake update/installation messaging ('Update installed!')
Blob URL page construction obscuring the served content
Abuse of a t.co shortlink to disguise the destination
Domain age information unavailable

Details

Page Title

Joining Google Meet

Scan Type

public

Domain Name Analysis

Within the Colombian country-code top-level domain (.co), 't.co' is registered while skipping any subdomain. The second-level label 't' is 1 characters long containing 0 vowels alongside one consonant. Segmentation suggests one word: t. No strong language cues emerged from the frequency lists.

Screenshot

1 Google Meet Verify you are human Click the checkbox to continue. I'm nat a robot Google Meet. Google Meet A- Secure video conferencing

Page Load Overview

1.28s
Total Load Time
203 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:411 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network89% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
89%
technology software
68%
download file sharing
44%
documentation technical
43%
adult content
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4162.159.140.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.217.115.4Google · CDNUnited States
AS15169Google LLC
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
85--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B538EAB47B76422A11BE18D7987870D3374851B810AC524FDEDC27C4F98A43B4A7BCE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1n+V76AllXD8wtuPlXD8wtuPjXD8wtuP+XD8wtuPDah:UBTz8wtuPlz8wtuPjz8wtuP+z8wtuPDU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:63635:AOhAWArS5hIHUBQlAKKwMho4goJI6JZAAEEgUCxAYkggcgZMIYQMAARyxCJwMxxWCBXuFAjcSBBQiZDUpN05DzAsAgTEJEFY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffefe7e7e7ffff
Perceptual Hash:b331cccc3333cccc
Difference Hash:000008080c080000
Wavelet Hash:3f3f272720203030
Color Hash:N/A

Other Hashes

Crop Resistant:000008080c080000

Scan History

Scan history not available

Unable to load historical scan data