Security Report: twit-follow.vg - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cf3ac2a7-e0a2-4262-b243-15bd5fdcad45 Domain and IP registration (RDAP)/api/v1/rdap/cf3ac2a7-e0a2-4262-b243-15bd5fdcad45 Certificate Transparency/api/v1/ct/gmx.net How often this domain was scanned/api/v1/domain/stats/twit-follow.vg Scan history for this domain/api/v1/domain/history/twit-follow.vg?limit=15

This website contacted 10 IPs in 2 countries across 14 domains to perform 93 HTTP transactions. The main domain is gmx.net and was registered 14 years ago.

Submitted URL: https://twit-follow.vg

Effective URL:

https://www.gmx.net/consent-management/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 90%

Risk Score

twit-follow.vg is flagged by 2 threat-intel feeds as countloader malware and redirects to a legitimate GMX page. Treat the URL as malicious and avoid interaction.

Risk Factors

Primary scan domain twit-follow.vg is reported as countloader malware by multiple threat-intel sources

Redirect chain from a malware-flagged entry domain to a legitimate GMX page

Entry domain reputation/age is not relevant to the final gmx.net page and does not mitigate the malware IoC

Safety Factors

Final URL is the official GMX domain (www.gmx.net)

No password, payment, or disguised credential fields were detected

No YARA, IDS, or JavaScript credential-exfiltration signals were detected

No brand impersonation on the final page

Established domain (10140 days old) with no strong malicious indicators — risk clamped from 9 to 5

Domain age information unavailable

Details

Page Title

GMX - kostenlose E-Mail, Cloud, Nachrichten & Freemail

Scan Type

public

Favicon Hash

MMH3: 230732898

MD5: 99459cf22d06dfb4d9e48d0a958f70f3

Domain Name Analysis

The domain 'twit-follow.vg' uses the .vg country-code top-level domain with no subdomain. The second-level label 'twit-follow' is 11 characters long holding three vowels versus seven consonants, notching one hyphen. Segmentation suggests 2 words: twit, follow. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

32.76s

Total Load Time

823 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:182 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software73% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

73%

documentation technical

64%

gambling betting

64%

government public service

52%

phishing scam

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	217.72.199.68	Germany	AS8560IONOS SE
9	31.58.179.42	United Arab Emirates	AS56971Cgi Global Limited
9	217.72.199.51	Germany	AS8560IONOS SE
9	23.52.180.183Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
9	217.72.199.29	Germany	AS8560IONOS SE
9	217.72.199.64	Germany	AS8560IONOS SE
9	217.72.199.1	Germany	AS8560IONOS SE
9	217.72.199.24	Germany	AS8560IONOS SE
9	23.209.208.242Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
9	217.72.199.120	Germany	AS8560IONOS SE
93	10	-	-