Security Scan: T-M-W.at

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea0fbf0a-1c11-4e9d-937e-c5b7c9e46382 Domain and IP registration (RDAP)/api/v1/rdap/ea0fbf0a-1c11-4e9d-937e-c5b7c9e46382 Certificate Transparency/api/v1/ct/ushort.company How often this domain was scanned/api/v1/domain/stats/t-m-w.at Scan history for this domain/api/v1/domain/history/t-m-w.at?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 17 HTTP transactions. The main domain is ushort.company and was registered 10 months ago.

Submitted URL: https://t-m-w.at

Effective URL:

https://ushort.company/dkdLXDbxe0r2

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised CMS host (ushort.company, flagged 'wp inject' by 2 feeds) serving the analyst-vetted ClearFake Polygon contract loader (CRITICAL YARA hit) alongside hijacked casino-spam pages. Do not visit or interact.

Risk Factors (5)

Known malicious ClearFake blockchain-contract loader injected into the page (CRITICAL phishing kit, analyst-vetted)

Primary domain ushort.company flagged as 'wp inject' malicious by two independent threat-intel feeds

Entry domain t-m-w.at reported as a malware 'unknown loader' by threat-intel

Scanner-vs-client content mismatch (block page for datacenter IP, real content for residential client) combined with the above — consistent with evasion on top of compromise

Hijacked-site spam content: unrelated multi-language casino/affiliate articles and page text 'Hacked by CoupDeGrace' on a domain unrelated to any of the brands discussed

Domain age information unavailable

Details

Page Title

T-M-W.at

Scan Type

public

Domain Name Analysis

Domain 't-m-w.at' uses the Austrian country-code top-level domain (.at). The registrable portion 't-m-w' spans 5 characters containing 0 vowels alongside 3 consonants, along with 2 hyphens. Tokenizing the label suggests three words: t, m, w. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.01s

Total Load Time

185 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:631 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical78% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

78%

government public service

44%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	91.151.19.40	Germany	AS47692Nessus GmbH
8	186.2.171.26	United Arab Emirates	AS59692IQWeb FZ-LLC
17	2	-	-

Detected Technologies4

50%

50%

40%

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118937D32C2684A175BB60745BDB2371DED7D9428AB07923BB4AFB018A1811FE07F5B5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7+ypku/yZWO30MGT/IYQRWO/yVCR/rhy0p6uqfOEQmEvgnSMMtgmkLYPbutm6v+U:7XKHZNhYQRN/eCV1tYL1WonYtgFYStVZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:96652:MKUoqLQjAHEQSS0QNGbwAlwYKiyk5GCjzBEBGD6KUAGhbEcZIZwAgAhTGhOE5QEQ4CECKYKCCGrqQhBhBxDiIJBCJEq8YAWo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101013d39010101

Perceptual Hash:8add3274cdcd3232

Difference Hash:0121017131010101

Wavelet Hash:03030f3f3f030303

Color Hash:#7995d2

Other Hashes

Crop Resistant:568000000000200e,0121017131010101

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: t-m-w.at