Security Scan: nitter

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ca25e9fc-2573-4cf9-a808-7914a783378a Domain and IP registration (RDAP)/api/v1/rdap/ca25e9fc-2573-4cf9-a808-7914a783378aHow often this domain was scanned/api/v1/domain/stats/nitter.click Scan history for this domain/api/v1/domain/history/nitter.click?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is nitter.click and was registered 1 month ago.

Submitted URL: https://nitter.click/

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

Functional self-branded Nitter search front-end with no credential/payment forms, no malware or threat-intel hits; only new-domain and unranked signals plus a low-confidence ML label.

Risk Factors (3)

Domain registered 47 days ago (new, unranked) — weak prior, not evidence of wrongdoing

ML content classifier returned a 40% phishing/scam label as a supporting indicator

Operator of this third-party Nitter instance is unidentified; search queries pass through it

Safety Factors (5)

Self-branded site (title/meta match its own domain), no impersonation of another entity

No credential, login or payment form; only a public search field

No Indicators of Compromise, YARA malware patterns, IDS alerts, or malicious JavaScript behavior

All scripts served from the site's own domain; no cross-origin credential handling detected

og:type 'article' — brand name use is descriptive of the software, not a login page

Domain age information unavailable

Details

Page Title

nitter

Scan Type

public

Favicon Hash

MMH3: -982104280

MD5: 43750056e60f23f2fc9e647439cbbf64

Domain Name Analysis

Within the .click top-level domain, 'nitter.click' is registered and has no subdomain. Count 6 characters in 'nitter' split between 2 vowels and 4 consonants. Word splitting yields 3 words: n, it, ter. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.91s

Total Load Time

484 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:13 chars

Detector Agreement:0%

Website Classification

Primary Category

phishing/scam40% confidence

Type: static

Method: structural

All Detected Categories

phishing/scam

40%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	38.43.93.164	Detroit, Michigan, United States	AS399804Hostodo
10	1	-	-

Detected Technologies2

OpenSearch

100%

Open-Graph-Protocolvarticle

100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10E71867387A0885617B209DCED623229DE45D20BC2C65E9072FC84F18FE2ED2C86FD59

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Te1dklVS138aMHmQi6+lLrFfzLqtHhZKlMBOpjmOT+UqMYPfOtyEPM3AvEjzhh:TBSnBBzLgBZqpj4gMREgWEzhh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3568:CaEAQEMAAqJAEABFgIAAYJIQBBDgDIAAAAoACIxAggAIIAAAABAgJAACAAICCAFEAgEoAQQwABEAAQCOEIZAAQCA4gEFAcAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00001818000000

Perceptual Hash:9c96b2969c96b296

Difference Hash:0400003030080000

Wavelet Hash:ffd3203818000000

Color Hash:#d2a679

Other Hashes

Crop Resistant:0400003030080000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: nitter.click