Security Scan Report: ttot.accshieldportal.com

Submitted: Sep 14, 2026, 5:48:08 PMCompleted: Sep 14, 2026, 5:49:23 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Multi-feed 'sparkycarp' malware indicators on the primary and parent domain plus two CRITICAL IDS phishing/trojan alerts and a sinkhole reference make this host confirmed malicious infrastructure — do not visit or connect.

Risk Factors (5)
Multi-source corroborated malware-family (sparkycarp) indicators against the primary and parent domain
Two CRITICAL IDS alerts classifying traffic as a network trojan / phishing SparkyCarp domain
Host IP 160.16.200.77 reported as a known attacker in threat-intel feeds
Domain absent from Cisco Umbrella top 1M with only 10/100 legitimacy signals
No extractable page content and no page title — opaque/dynamically delivered infrastructure consistent with C2 or sinkhole nodes
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'ttot.accshieldportal.com' uses the commercial generic top-level domain (.com) and includes subdomain 'ttot'. Count 15 characters in 'accshieldportal' holding 5 vowels versus 10 consonants. Segmentation suggests three words: acc, shield, portal. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ttot.accshieldportal.com

Page Load Overview

18.43s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:74%
Script:Latin
Direction:ltr

Detection Details

Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2160.16.200.77Tokyo, Tokyo, Japan
AS9370SAKURA Internet Inc.
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9B012B5C6A941443CF174400A901540581442E824A1992CEB82A0A99804626A942342

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6YFaSVbvVXQSaU1K7LSSWXz:qzxO96+VRXYUMmHz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:3ac11d589ae3bb28d38b4cb5105ac9fe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870f0f0f0f0f0f0f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#d279b9

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data