Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/virustotal.com
Generated: Fri, 13 Nov 2026 14:56:26 GMT
Target Website: virustotal.com
Overall Trust Score: 95/100 (Trusted)
Is virustotal.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Popular site · #3,401 worldwideChecked Nov 13, 2026
95
Trust score
Why: Main reasons: domain registered 24+ years ago; not flagged by Google Safe Browsing; popular website — ranked #3,401 worldwide.
Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security96/100
Email100/100
Positive highlights
- Domain registered 24+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Popular website — ranked #3,401 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- Site responded with 200Final URL: https://www.virustotal.com/gui/. Response time 511ms.
- HTTPS works with a valid certificateA secure connection was made on port 443. Certificate log details were unavailable at scan time.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
Negative highlights
No red flags found in this scan.
Note: Registered via MarkMonitor Inc..
Note: 4 technologies detected. Svelte, Google Analytics, Google Tag Manager, Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about virustotal.com
- Website
- virustotal.com
- Popularity
- #3,401 worldwide (Tranco top 1M)
- Domain created
- Sep 18, 2002 (24.2 years old)
- Domain expires
- Sep 18, 2027
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 34.54.88.138
- Hosting / CDN
- Cloudflare
- SSL certificate
- HTTPS works (certificate details unavailable)
- Email security
- SPF ✓ · DMARC ✓ (quarantine)
- Threat blocklists
- Not listed (clean)
- Technology
- Svelte, Google Analytics, Google Tag Manager, Cloudflare
Summary
95/100 — trusted. Long-established domain (24.2 years old), clean threat reputation, no impersonation patterns.
No malware/phishing on feedsGood reputationHTTPS enabled
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
Verified
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- September 18, 2002 (24.2 years ago)
- Last Updated
- August 17, 2026
- Registry Expiry Date
- September 18, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibited
Domain registered 24+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
Warning
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: X-Frame-Optionsmissing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (16)
alt-svc: h3=":443"; ma=2592000 cache-control: public, max-age=60 cf-cache-status: DYNAMIC cf-ray: a59e9f882d1fb86e-CMH connection: close content-security-policy: frame-ancestors 'self' https://www.virustotal.com; script-src 'sha256-mWcmt8hUpIh9+WXklHxFBP0LcBOR0xMn94ILkwMCvTc=' 'sha256-N9/jfo1xyH+AztgvBSnChoTbYmyhwSlVI0oyzpSQWxo=' 'sha256-Xg6ePoXKMJIB7Xk1zC04fE5lERrgkqOqgF7SLM27ZX8=' 'sha256-JlohNwn9eSmVvUddF1exaGYTJhpUm5nAP5B9OLr/2QY=' 'sha256-gdxwqGCY2B5pE/lC2M61gRb3WTzSZgEX+ob3GSGXlDM=' 'sha256-P8ejDqoroI1VUDwwbGJ+KjWJlZx5iSCH6QM4feJbfCM=' 'strict-dynamic' https: 'unsafe-inline' 'wasm-unsafe-eval'; object-src 'none'; base-uri 'self'; script-src-attr 'none' content-type: text/html date: Fri, 13 Nov 2026 14:56:27 GMT etag: W/"YmgKUQ" expires: Fri, 13 Nov 2026 14:57:27 GMT server: cloudflare strict-transport-security: max-age=63072000; includeSubDomains; preload transfer-encoding: chunked vary: Accept-Encoding via: 1.1 google x-cloud-trace-context: d2c0e87a3df18490f0ce7b3fcbe2c96e
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
Resolved
- IPv4 Addresses (A)
- 34.54.88.138
- IPv6 Addresses (AAAA)
- 2600:1901:0:69ab::
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 10), alt1.aspmx.l.google.com (Priority: 20), alt2.aspmx.l.google.com (Priority: 20), aspmx3.googlemail.com (Priority: 30), aspmx2.googlemail.com (Priority: 30)
- Authoritative Nameservers (NS)
- ns-cloud-c4.googledomains.com, ns-cloud-c1.googledomains.com, ns-cloud-c2.googledomains.com, ns-cloud-c3.googledomains.com
- TXT Records Found
- 4 TXT verification records
A Records (IPv4)
34.54.88.138
TXT Verification Records
google-site-verification=tQE2QW2ylRY5dnzKcEisvI9I0h1KA73FJjROvPii1Pk
google-site-verification=i9iYxFW3ir0lIkCTNewpXhSOTBckiAO0H656epZ3HtQ
v=spf1 include:_spf.google.com include:_spf.zdsys.com include:mail.zendesk.com include:2567647.spf07.hubspotemail.net -all
google-site-verification=Qq9eZi7f40MwYOcrV5vdApFIaFm4aneacq0Lzrcnugg
2 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
4 authoritative nameservers
+2
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
Found
- Registrable Domain
- virustotal.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- ns-cloud-c1.googledomains.com, ns-cloud-c2.googledomains.com, ns-cloud-c3.googledomains.com, ns-cloud-c4.googledomains.com
- Registration Lifecycle
- Registered: 2002 → Expires: 2027
Nameservers (NS)
ns-cloud-c1.googledomains.comns-cloud-c2.googledomains.comns-cloud-c3.googledomains.comns-cloud-c4.googledomains.com
Domain registered 24+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
Protected
- SPF Record
- v=spf1 include:_spf.google.com include:_spf.zdsys.com include:mail.zendesk.com include:2567647.spf07.hubspotemail.net -all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:mailauth-reports@google.com
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (google, s1, s2)
+3
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Clean / Verified
- Root Domain Label
- virustotal
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
Detected
Detected Technologies by Category
js
Svelte
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- VirusTotal
- Meta Description
- VirusTotal
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes
- Generator Software
- VirusTotal
4 technologies detected
Svelte, Google Analytics, Google Tag Manager, Cloudflare
Mobile viewport configured
+2
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
511ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/3
QUIC-based, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
QUIC/H3
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 511 ms
- Payload Body Size
- 6.9 KB
- Compression Status
- Uncompressed
- Cache Directives
- public, max-age=60
Response is cache-friendly
public, max-age=60
+2
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
Safe
AI Content Evaluation
95/100 — trusted. Long-established domain (24.2 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 24+ years ago; not flagged by Google Safe Browsing; popular website — ranked #3,401 worldwide.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 59 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
cloudflare
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 34.54.88.138
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.virustotal.com/gui/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://virustotal.com/ → https://www.virustotal.com/gui/
Site responded with 200
Final URL: https://www.virustotal.com/gui/. Response time 511ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
Secure
- Certificate Authority (Issuer)
- Not available (certificate logs did not respond)
- Subject Common Name (CN)
- —
- Validity Period
- Not available
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- Verified in live TLS
Subject Alternative Names (Sample)
virustotal.com
HTTPS works with a valid certificate
A secure connection was made on port 443. Certificate log details were unavailable at scan time.
+8
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 570-8173-4, 2026-11-11, 27433547-2, 111679026
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
Present
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 9 rules
View Raw robots.txt
User-agent: Baiduspider Disallow: /static/css/ Disallow: /static/js/ Disallow: /static/font/ Disallow: /static/tiny_mce/ Disallow: /static/fileupload/ Disallow: /static/codemirror/ Disallow: /static/prettify/ Disallow: /static/select2/ Disallow: /?*apikey*
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
32
This scan
Sources Checked
19
Live security feeds
Scan Duration
2.60s
Fast scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk
User reviews of virustotal.com
No reviews yet. Be the first to share your experience.