Phishing
This site is classified as Phishing based on multiple risk signals, including 16 blacklist detections, no established public user-review history, and phishing-related signals. These risks are driven by active warning signals despite the site's longer domain history.
Trust signal radarNormalized trust signals for to.lkDomain Maturity: 1522 daysDomain MaturityWarning Cleanliness: 16 detectionsWarningCleanlinessSafety Level: 4 negative tags, 1 warning signalSafetyLevelPositive Signals: 1 positive signalsPositiveSignalsPopularity: Estimated low traffic without Tranco or social profile dataPopularityTrust Zone: .lkTrust ZoneOperational Signals: 1 detected servicesOperationalSignalsLocation Credibility: Hosting country NLLocation Credibility
Figure 1. Trust signal radar for to.lk. Larger shaded area indicates stronger trust signals.
How we scored to.lk
Negative signals:
security-provider warnings
multiple malware or phishing blacklist detections (16)
a redirect to another domain (shorturl.lk)
heuristic signals associated with phishing
automated caution checks
limited independent reputation data
Positive signals:
a long-term domain history (4.2 years)
an active SSL certificate (3 months)
Final destination:
https[:]//shorturl.lk/
Last checked October 16, 2026 at 7:50 AM by
Gridinsoft Trust Model v2.5.7
Share this report?
What is To?
We flagged To.lk as phishing. The page behavior matches a common credential-theft flow: impersonation first, urgency second, data request last.
Typical prompts on sites like this include account alerts, failed-delivery notices, or "verify now" dialogs asking for passwords, card numbers, or one-time codes. Do not submit credentials here. Open the real service in a new tab and check your account directly.
This domain was registered August 16, 2022 at 4:31 AM through the company unknown
and ownership information is not publicly available.
Complaint contact not found.
Is to.lk safe?
— Unfortunately, not likely.
🚨
Gridinsoft blocks this website because it was classified as phishing.
to.lk should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and publicly displayed security sources report 16 warning(s). Avoid entering passwords, personal details, or payment data.
Why is to.lk marked "Phishing"?
Gridinsoft evaluates to.lk, focusing on limited website popularity, suspicious content indicators (Blacklisted by Security Providers, Heuristic - Phishing, Heuristic Risk), hosting technology and infrastructure, SSL certificate status, website reputation across multiple databases, customer reviews from various independent platforms. We weigh these indicators to calculate the trust score.
Note: Automated systems are not perfect — while the evidence suggests risk, there is still a chance the site is legitimate. We recommend you check the website using detailed analysis or by contacting the company directly through verified channels.
A structured view of the site's detected themes, page signals, and related online footprint elements.
Cookie Consent
This site implements a cookie-consent interface for managing tracking and data-collection preferences.
Bootstrap Framework
This site uses Bootstrap, a widely-adopted open-source framework for responsive web development. Bootstrap enables efficient creation of mobile-friendly interfaces through standardized components and styling.
Google Tag Manager
The to.lk website uses Google Tag Manager to add and update tracking tags on its website.
jQuery Library
Social Media Links
The presence of social media links on the website indicates that it references social media accounts. This signal alone does not confirm ownership or authenticity of those profiles.
Blacklisted by Security Providers
Security intelligence signal: A security-provider signal contributes to the automated assessment of to.lk. Publicly displayable provider verdicts, when available, are reported separately; some source details may be restricted by license.
Redirects to Another Domain
to.lk redirects visitors to a different domain. This can be legitimate in some migrations or forwarding setups, but it reduces transparency for users evaluating the original address.
Heuristic - Phishing
Heuristic Risk
Established Domain
This site has maintained active domain presence over time, indicating operational continuity.
Listed by Gridinsoft
Gridinsoft Internet Security classified this site as unsafe. As a VirusTotal partner, our detections contribute to broader protection across tools and browsers.
External provider warnings: 16/32 Phishing
This section shows what independent external security sources say about this site.
A warning appears when one or more sources report malware, phishing, abuse, or other safety concerns. Each row shows the source and its verdict.
If no source reports a warning, the site is shown as clear in this section.
Criminal IP
Phishing
alphaMountain.ai
Phishing
Certego
Phishing
CyRadar
Phishing
DNS8
Phishing
Emsisoft
Phishing
Forcepoint ThreatSeeker
Phishing
Lionic
Phishing
Netcraft
Malicious
SafeToOpen
Phishing
Seclookup
Malicious
SOCRadar
Phishing
Sophos
Malware
URLQuery
Malicious
VIPRE
Phishing
Webroot
Malicious
External provider results for To.lk, last checked October 16, 2026.
— VirusTotal
Domain Information
CreatedAugust 16, 2022 at 4:31 AM
Domain Age4.2 years
Registry SourceIANA
Top Level Domain.lkDomain Extension
Technical Details
HTTP status302
IP Address209.42.255.1
Hostnamecp01-nl.privatesystems.net
Hosting ProviderPrivateSystems NetworksAmsterdam, North Holland, NL
NetworkAS63410 - PrivateSystems NetworksHosting
SSL CertificateYR1TLSv1.3 · Valid for: 3 months · from September 11, 2026 at 3:54 PM · to December 10, 2026 at 3:54 PM
Content from the analyzed website
Quoted for security analysis. These statements belong to the source website and are not endorsed by Gridinsoft.
Original page titleShort URL Generaotor - Free Short Links and Track Link Activites | ShortURL - to.lk
Original descriptionFree short URL generator with shorturl.lk | Track each and every short link inside your account and boost your brand or business awareness by analyzing.
Detection SignaturesThese signatures are used to generate the security fingerprint below.
Cookie ConsentBootstrap FrameworkjQuery LibrarySocial Media Links
Verified ServicesThis domain has been verified by the following legitimate services and organizations, confirming authentic ownership and proper email security configuration.
Google Verification
Domain ownership verified by Google.
Security FingerprintUnique identifier based on site analysis
Scammers have devised new ways to deceive users, and what was relevant ten years ago may not be applicable today. In this post, we have compiled the most current types of online scams.
If you own To.lk and want to challenge the trust score, please submit a review request via portal.gridinsoft.com. There you can claim your profile and add verified company/contact details. If you cannot access the portal, email legal(at)gridinsoft.com with proof of legitimacy and contact details. We never charge website owners for reviews or reconsideration requests. For more information, please review our Disclaimer.
Your comment is currently undergoing moderation and will be published shortly.
Help protect others by sharing this page on social media! The more people who know about to.lk, the fewer chances they have to deceive someone else.Help others evaluate to.lk by sharing this page on social media!
Help protect others by sharing this page on social media! The more people who know about to.lk, the fewer chances they have to deceive someone else. Help others evaluate to.lk by sharing this page on social media!