ScanMalware.com

Security Scan Report: u-to.work

Redirected to:
https://u-to.work/#/pages/index/index
Submitted: Apr 9, 2026, 6:05:42 AMCompleted: Apr 9, 2026, 6:07:06 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a671a70b-3fca-4c37-a0d7-3954f7be4c42Domain and IP registration (RDAP)/api/v1/rdap/a671a70b-3fca-4c37-a0d7-3954f7be4c42Certificate Transparency/api/v1/ct/u-to.workHow often this domain was scanned/api/v1/domain/stats/u-to.workScan history for this domain/api/v1/domain/history/u-to.work?limit=15

This website contacted 5 IPs in 2 countries across 6 domains to perform 62 HTTP transactions. The main domain is u-to.work and was registered 5 months ago.

Submitted URL: https://u-to.work/

Effective URL:

https://u-to.work/#/pages/index/index
Redirected

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

New, unranked site shows no malicious activity; low risk but monitor due to age and obfuscated scripts.

Risk Factors (2)
Domain age less than 7 days (critical new domain)
Highly obfuscated JavaScript (CRITICAL score) without clear malicious intent
Safety Factors (5)
No credential or payment forms present
No malicious Indicators of Compromise matches
No YARA malware detections
No network IDS alerts
External domains appear benign
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

The domain 'u-to.work' uses the .work top-level domain with no subdomain. Its registrable label 'u-to' stretches across 4 characters containing two vowels alongside one consonant; bonus characters include one hyphen. Breaking it apart gives two words: u, to. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://u-to.work/

Page Load Overview

1.56s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:5,596 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain69% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
69%
technology software
66%
news media journalism
64%
real estate property
58%
healthcare medical
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14163.181.58.166United States
AS45090Shenzhen Tencent Computer Systems Company Limited
12188.114.96.3United States
AS13335Cloudflare, Inc.
12124.221.80.91Germany
AS24429Zhejiang Taobao Network Co.,Ltd
12188.114.97.3United States
AS13335Cloudflare, Inc.
12104.16.79.73United States
AS13335Cloudflare, Inc.
625--

Detected Technologies5

HTTP/3
40%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B394E8B19D1E2D997333C55593CCAEDC6D2CE32384A20D99F2463D2E8BC2B9523D6706

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:qZywQ1OAPkWDL32ye5trKem0OTNxwPSluR:qZywQ1OAPkWDL32ye5trKem0OTa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:419626:lAoACBxA0gEVosBA+EIDwYAmrEjAAENxexUTBAi0I4zEBAWECBAwgAIRAFYaAwQACSQaJiUAMiA1QJg7hKQHKEQKAfQBDOoo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data