Security Scan Report: t.co

Redirected to:
blob:https://firebasestorage.googleapis.com/c113f070-972b-4292-93c9-14...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 3 HTTP transactions. The main domain is t.co and was registered 16 years ago.

Submitted URL: https://t.co/Oy4qmbjAto

Effective URL:
blob:https://firebasestorage.googleapis.com/c113f070-972b-4292-93c9-14...
Redirected

The Cisco Umbrella rank of the primary domain is #1,176 of the top 1 million websitesTop 10K Site

AI Security Verdict

Confirmed Scam

Confidence: 90%

10
Risk Score

Fake Microsoft Teams document portal with a bogus 'verify you are human' step that delivers ScreenConnect.ClientSetup.exe — a remote-access tool used for malware/remote-control attacks. Do not download or run; report.

Risk Factors (5)
Executable (.exe) disguised as a document/report download
Remote-access tool (ScreenConnect) delivery to unsuspecting users
Fake CAPTCHA / anti-bot verification step used as social-engineering pretext
Impersonation of Microsoft Teams on a non-Microsoft, cloud-storage/URL-shortener path
No legitimate business purpose for delivering a document as a ScreenConnect installer
Domain age information unavailable

Details

Page Title

Report

Scan Type

public

Domain Name Analysis

Within the Colombian country-code top-level domain (.co), 't.co' is registered while skipping any subdomain. The core label 't' covers 1 characters with 0 vowels and 1 consonant. Word splitting yields 1 word: t. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Verify you are human I'm not a robot Click the checkbox to continue Microsoft Teams Privacy «Terms,

Page Load Overview

0.74s
Total Load Time
25 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:330 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service48% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
48%
documentation technical
47%
healthcare medical
47%
news media journalism
43%
technology software
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.217.117.4Google · CDNUnited States
AS15169Google LLC
0104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.217.113.4Google · CDNUnited States
AS15169Google LLC
34--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F22317B56A300617C2764A52FE797857661D003E207CD583EDCD258CF8EBE4A863B8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BrQk7OZqvcK2Ug+PH/e4sfxMBNuKLDVSiyiZiB7B/2Jd2:BrMYxgiyiZiBR2JI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10096:AGAGVASh1xIWGACqlaGiAwAEAA0zCUoAJpTSIuMgDkhroBTbEzIJB0AQmQBlSQhwAAoIgSYIFhKFD+kAQM0FCLAElAnBTQMQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000818000000
Perceptual Hash:993366cc993366cc
Difference Hash:0000001a12000000
Wavelet Hash:c0c0c0c8f8f0f0f0
Color Hash:07000000000

Other Hashes

Crop Resistant:0000001a12000000

Scan History

Scan history not available

Unable to load historical scan data