ScanMalware.com

Security Scan Report: t.co

Redirected to: blob:https://southtoefirecom.fatcow.com/d7d4976d-546d-42b5-b0d3-5f0915453159

Site favicon
Submitted: Dec 12, 2025, 9:05:11 PMCompleted: Dec 12, 2025, 9:05:42 PMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 5 domains to perform 9 HTTP transactions. The main domain is .

Submitted URL: https://t.co/s3rtjUjjdL

Effective URL: blob:https://southtoefirecom.fatcow.com/d7d4976d-546d-42b5-b0d3-5f0915453159Redirected

The Cisco Umbrella rank of the primary domain is #1,176 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Phishing login page with multiple disguised password fields; treat as high risk.

Risk Factors
Disguised password fields (type='text' with password placeholders)
Hidden password fields
Unicode evasion in form fields
Multiple password inputs on a site with unknown age
Lack of brand verification on final URL
Domain age information unavailable

Details

Page Title

Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(79%)

Domain Information

Domain 't.co' uses the Colombian country-code top-level domain (.co) without a subdomain. Its registrable label 't' stretches across 1 characters split between zero vowels and one consonant. Word splitting yields one word: t. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://t.co/s3rtjUjjdL

Page Load Overview

3.43s
Total Load Time
9
HTTP Requests
5
Domains
189 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,870 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking79% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
79%
documentation technical
53%
adult content
52%
corporate business
50%
technology software
44%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.66.0.227United States
AS13335CLOUDFLARENET
023.64.12.59Warsaw, Mazovia, Poland
AS20940Akamai International B.V.
065.254.248.96United States
AS29873BIZLAND-SD
023.64.12.58Warsaw, Mazovia, Poland
AS20940Akamai International B.V.
0151.101.194.137San Francisco, California, United States
AS54113FASTLY
02a04:4e42::649United States
AS54113FASTLY
023.64.12.56Warsaw, Mazovia, Poland
AS20940Akamai International B.V.
0151.101.2.137San Francisco, California, United States
AS54113FASTLY
0151.101.130.137San Francisco, California, United States
AS54113FASTLY
02a04:4e42:600::649United States
AS54113FASTLY
914--

Detected Technologies4

PasswordField
100%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T187E34C36619304BAA9A385885BEB2B4A3E545847D0CAD13477ACB7D80FC38D5D47E3DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1QlISjLbAqFbohxb1Mr39lGbocwruWNOTAHW:1QlISjLbn4xKeb4W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:144250:1QFBYBYOI0gCSwEViEwCFmUUgyIoABgABkUgU0hQmiBCUBJwJEgDDJZCCGDdkAE89ArRABYISCIHgsQsnEeSbIoQIpCYBC1r

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data