Security Scan Report: letitworkright.top

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is letitworkright.top and was registered 1 month ago.

Submitted URL: https://letitworkright.top/

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Counterfeit 'human verification' gate on a 29-day-old, unranked .top domain flagged by IDS. No credential form or malware code observed, but the page has no legitimate purpose and exists to push users into a deceptive click-through.

Risk Factors (4)
Fake human-verification page with no real verification function, designed to deceive the visitor into clicking 'Continue'
29-day-old domain with no reputation, hosting a throwaway verification gate
Two HIGH IDS alerts indicating hostile .top domain traffic
Title/domain mismatch and artificial urgency countdown
Safety Factors (5)
No credential, password, or payment forms present (0 forms, 0 password fields, 0 payment fields)
No JavaScript credential exfiltration or cross-origin data submission detected
No YARA malware patterns, no known phishing kit, no threat-intel Indicators of Compromise
No third-party scripts or external domains contacted
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Human Check

Scan Type

public

Domain Name Analysis

Within the .top top-level domain, 'letitworkright.top' is registered while skipping any subdomain. The registrable portion 'letitworkright' spans 14 characters with 4 vowels and 10 consonants. Segmentation suggests four words: let, it, work, right. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://letitworkright.top/

Page Load Overview

0.18s
Total Load Time
8 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:261 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical33% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
33%
government public service
32%
technology software
28%
adult content
26%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1717207226171203B60B3910D67CB839A36265507A9478224BFBEB7408FC7ED75A777EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:XUiIhn2Zr5GIrgcZUoRcEkDR6ivEm3BYF3UvCDguWqzHyGRmFcdqMALvwFgz4msU:kien6EtoRGRB/y3cWmqALvpOx6ZiC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17245:EIzFZonAwE0wAgKDjBhAM0olIinAFCCoyiIw3CSAAl7ieBgERDgAgBRIRREJbUomVwULADRaUzIIuMyShIORIEAEBhElAW4U

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0008183c3c000010
Perceptual Hash:9b993166cc669999
Difference Hash:0010322a2a0c0c10
Wavelet Hash:071f1f1f3c242030
Color Hash:#40a6bf

Other Hashes

Crop Resistant:0010322a2a0c0c10

Scan History

Scan history not available

Unable to load historical scan data