ScanMalware.com

Security Scan Report: t.co

Redirected to: blob:https://xiaokeyi.com/c00757cc-3872-4190-914a-1634e85c0a54

Site favicon
Submitted: Nov 6, 2025, 2:55:00 AMCompleted: Nov 6, 2025, 2:55:45 AMpubliccompleted
Loading additional data...

Summary

This website contacted 27 IPs in 4 countries across 11 domains to perform 15 HTTP transactions. The main domain is .

Submitted URL: https://t.co/A8eLbmGM5P

Effective URL: blob:https://xiaokeyi.com/c00757cc-3872-4190-914a-1634e85c0a54Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Phishing site impersonating American Express; confirmed scam.

Risk Factors
Brand impersonation on a non‑official domain
Credential harvesting forms on a brand‑spoofing page
Disguised password fields (type='text' with password placeholders)
Unicode evasion in form inputs
Domain appears to be brand‑new and unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

Log in to My Account | American Express US

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Domain 't.co' uses the Colombian country-code top-level domain (.co) with no subdomain. Count 1 characters in 't' with 0 vowels and one consonant. Splitting it apart reveals one word: t. The median word length lands at 1 character. The linguistic tilt is Chinese (Zhuyin) for 't'. You will also see it in Catalan and Albanian contexts.

Screenshot

Security scan screenshot of https://t.co/A8eLbmGM5P

Page Load Overview

24.08s
Total Load Time
15
HTTP Requests
11
Domains
196 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,997 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15151.101.66.137San Francisco, California, United States
AS54113FASTLY
023.212.221.34Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
023.227.39.200Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
023.212.203.180Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
0162.159.140.229United States
AS13335CLOUDFLARENET
023.201.242.36Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
035.157.26.135Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
0142.250.185.234United States
AS15169GOOGLE
063.176.8.218Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
0154.205.158.24Jakarta, Jakarta, Indonesia
AS138915Kaopu Cloud HK Limited
1527--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16242AA40F2DCA812692022DFCA919F2FC93EB331A2905E437F1C5A94FBB5D636A45357

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:7xBlhAfCBQuil/4sc+cjTSjuFFiJI9EeRNWk+/OwZOPh3YBB4cCGaKAVx46KnQfa:7xBlFBQFODOioU1uxGr8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12222:JEQWGJGUQBSGQiiUCAoEEwMAUg9YABKQEQ0ABK8MGhQyhgUKoQECArl4AIVGawQgMyAgIEsAAQCIJhBAIIFkIJRCKBEYCBYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fd32324648baffff
Perceptual Hash:e464cb9b9b92c664
Difference Hash:596666949a661515
Wavelet Hash:bd3030300838ffff
Color Hash:#d22d96

Other Hashes

Crop Resistant:596666949a661515,b68cc181ae2ede2e

Scan History

Scan history not available

Unable to load historical scan data