Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/virustotal
Generated: Sat, 05 Sep 2026 11:30:58 GMT
Target Website: virustotal.com
Overall Trust Score: 91/100 (Trusted)
virustotal.com
Trusted
Scanned: Sep 5, 11:30 AMTRUST SCORE
91
CONFIDENT
Low Risk
91/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
97/100
97/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
91/100 — trusted. Long-established domain (24.0 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=Google Trust Services, CN=WR3
Threat Status
CleanClean
No blacklists or malware
Domain Age
24.0 years24.0 years
Registered 9/18/2002
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
216.239.36.21216.239.36.21
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Served through Cloudflare
- 8 address record(s) resolved
- IPv6 (AAAA) available
- 4 authoritative nameservers
- Domain registered 24+ years ago
- Owner information disclosed
Warnings
- No privacy policy found
- No terms of service found
- No contact page found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- September 18, 2002 (24.0 years ago)
- Last Updated
- August 17, 2026
- Registry Expiry Date
- September 18, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibited
Domain registered 24+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: X-Frame-Optionsmissing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (17)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 216.239.36.21, 216.239.32.21, 216.239.38.21, 216.239.34.21
- IPv6 Addresses (AAAA)
- 2001:4860:4802:34::15, 2001:4860:4802:38::15, 2001:4860:4802:36::15, 2001:4860:4802:32::15
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 10), alt1.aspmx.l.google.com (Priority: 20), alt2.aspmx.l.google.com (Priority: 20), aspmx2.googlemail.com (Priority: 30), aspmx3.googlemail.com (Priority: 30)
- Authoritative Nameservers (NS)
- ns-cloud-c1.googledomains.com, ns-cloud-c4.googledomains.com, ns-cloud-c2.googledomains.com, ns-cloud-c3.googledomains.com
- TXT Records Found
- 4 TXT verification records
A Records (IPv4)
216.239.36.21216.239.32.21216.239.38.21216.239.34.21
TXT Verification Records
google-site-verification=tQE2QW2ylRY5dnzKcEisvI9I0h1KA73FJjROvPii1Pk
google-site-verification=i9iYxFW3ir0lIkCTNewpXhSOTBckiAO0H656epZ3HtQ
v=spf1 include:_spf.google.com include:_spf.zdsys.com include:mail.zendesk.com include:2567647.spf07.hubspotemail.net -all
google-site-verification=Qq9eZi7f40MwYOcrV5vdApFIaFm4aneacq0Lzrcnugg
8 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
4 authoritative nameservers
+2
- Registrable Domain
- virustotal.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- ns-cloud-c1.googledomains.com, ns-cloud-c2.googledomains.com, ns-cloud-c3.googledomains.com, ns-cloud-c4.googledomains.com
- Registration Lifecycle
- Registered: 2002 → Expires: 2027
Nameservers (NS)
ns-cloud-c1.googledomains.comns-cloud-c2.googledomains.comns-cloud-c3.googledomains.comns-cloud-c4.googledomains.com
Domain registered 24+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:_spf.google.com include:_spf.zdsys.com include:mail.zendesk.com include:2567647.spf07.hubspotemail.net -all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:mailauth-reports@google.com
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (google, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- virustotal
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
Svelte
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- VirusTotal
- Meta Description
- VirusTotal
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes
- Generator Software
- VirusTotal
4 technologies detected
Svelte, Google Analytics, Google Tag Manager, Cloudflare
Mobile viewport configured
+2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/3
QUIC-based, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
QUIC/H3
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 721 ms
- Payload Body Size
- 7.6 KB
- Compression Status
- Uncompressed
- Cache Directives
- public, max-age=60
Response is cache-friendly
public, max-age=60
+2
AI Content Evaluation
91/100 — trusted. Long-established domain (24.0 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 59 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 216.239.36.21
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.virustotal.com/gui/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://virustotal.com/ → https://www.virustotal.com/gui/
Site responded with 200
Final URL: https://www.virustotal.com/gui/. Response time 721ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=Google Trust Services, CN=WR3
- Subject Common Name (CN)
- looker.staging.virustotal.com
- Validity Period
- 86 days remaining (Expires: 2026-11-30T18:17:46)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 2689 certs recorded
Subject Alternative Names (Sample)
looker.staging.virustotal.comproactive-autopush.virustotal.comproactive-dev.virustotal.comproactive-staging.virustotal.comproactive.virustotal.comatlas-service.cloud.virustotal.comabout.virustotal.comyara-ci.cloud.virustotal.comscim.virustotal.comvirustotal.comasm.virustotal.comapi.asm.virustotal.comwww.virustotal.comrest.staging.virustotal.comapi.stage.asm.virustotal.comstage.asm.virustotal.comapi.qa.ma.virustotal.comapi-staging.qa.ma.virustotal.comapi-intelligence.qa.ma.virustotal.comtls.virustotal.com+20 more
Valid SSL / TLS certificate active
Issued by C=US, O=Google Trust Services, CN=WR3, valid for 86 remaining days.
+10
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 570-8173-4, 27433547-2, 2026-09-04, 866925204
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 9 rules
View Raw robots.txt
User-agent: Baiduspider Disallow: /static/css/ Disallow: /static/js/ Disallow: /static/font/ Disallow: /static/tiny_mce/ Disallow: /static/fileupload/ Disallow: /static/codemirror/ Disallow: /static/prettify/ Disallow: /static/select2/ Disallow: /?*apikey*
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
36
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.62s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk