Security Scan Report: vt.xn--tktok-tsa.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is xn--tktok-tsa.com and was registered 2 months ago.

Submitted URL: https://vt.xn--tktok-tsa.com

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Punycode hostname tæktok.com imitates tiktok.com and is set up as a branded redirect domain on a 61-day-old, unranked registration. No forms or malware found, but the deceptive hostname makes links from it untrustworthy.

Risk Factors (4)
Deceptive punycode/homograph hostname imitating tiktok.com
New domain (61 days old) presented as a branded link-shortening domain
Link redirection service obscures the real destination of any link built on this domain
Domain unranked in Cisco Umbrella
Safety Factors (5)
No credential, login or payment forms present on the page
No JavaScript malware patterns or obfuscated scripts detected
No threat-intelligence Indicators of Compromise matches
No network IDS alerts and no third-party script hosts
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

vt.xn--tktok-tsa.com is a custom short domain

Scan Type

public

Domain Name Analysis

The domain name 'vt.xn--tktok-tsa.com' uses the commercial generic top-level domain (.com) and includes subdomain 'vt'. The registrable portion 'xn--tktok-tsa' spans 13 characters containing 2 vowels alongside 8 consonants; bonus characters include 3 hyphens. Breaking it apart gives four words: xn, tk, tok, tsa. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

@ © ACTIVE Branded Short Domain vt.xn--tktok-tsa.com is configured for link redirection. If you arrived here by mistake, you can go back.

Page Load Overview

0.17s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:180 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain42% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
42%
government public service
31%
news media journalism
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1207.174.61.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
091.197.243.143Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
12--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16332739A52B3411A1E2353652BFA67045270E047DE16EDF9BFCD6288CF841A8B6C379C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:4e/wYWa6/1RWWYnf/yRwTX8/ddeotlE3xnhyyJDWeVktZX4caQomG8aUUyiHm6ae:7ZJcUIbbk2bFwFuCysSC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10976:CDNkBEISEpDmCnAIEWZJrGEVS5O4IkIyEQSwqFAgUIQAgApIx8CHBoMfQAMzKBAAAFxHDAEBMRFNSAi8JCQl7RDgECLIglCD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00247e24666e3c00
Perceptual Hash:b3ce4c3126ce99cc
Difference Hash:0044684c4c4c6000
Wavelet Hash:06667e6666667e0c
Color Hash:07008000c00

Other Hashes

Crop Resistant:0044684c4c4c6000

Scan History

Scan history not available

Unable to load historical scan data