Phishing
This site is classified as Phishing based on multiple risk signals, including 15 blacklist detections and no established public user-review history. These risks are driven by active warning signals despite the site's longer domain history.
Trust signal radarNormalized trust signals for to.lkDomain Maturity: 1552 daysDomain MaturityWarning Cleanliness: 15 detectionsWarningCleanlinessSafety Level: 2 negative tags, 1 warning signalSafetyLevelPositive Signals: 1 positive signalsPositiveSignalsPopularity: Estimated low traffic without Tranco or social profile dataPopularityTrust Zone: .lkTrust ZoneOperational Signals: 1 detected servicesOperationalSignalsLocation Credibility: Hosting country NLLocation Credibility
Figure 1. Trust signal radar for to.lk. Larger shaded area indicates stronger trust signals.
How we scored to.lk
Negative signals:
security-provider warnings
multiple malware or phishing blacklist detections (15)
a redirect to another domain (shorturl.lk)
limited independent reputation data
Positive signals:
a long-term domain history (4.3 years)
an active SSL certificate (3 months)
Final destination:
https[:]//shorturl.lk/
Last checked November 15, 2026 at 11:50 AM by
Gridinsoft Trust Model v2.6.2
Share this report?
What is To?
We flagged To.lk as phishing. The page behavior matches a common credential-theft flow: impersonation first, urgency second, data request last.
Typical prompts on sites like this include account alerts, failed-delivery notices, or "verify now" dialogs asking for passwords, card numbers, or one-time codes. Do not submit credentials here. Open the real service in a new tab and check your account directly.
This domain was registered August 16, 2022 at 4:31 AM through the company unknown
and ownership information is not publicly available.
Complaint contact not found.
Is to.lk safe?
— Unfortunately, not likely.
🚨
Gridinsoft blocks this website because it was classified as phishing.
to.lk should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and publicly displayed security sources report 15 warning(s). Avoid entering passwords, personal details, or payment data.
Why is to.lk marked "Phishing"?
Gridinsoft evaluates to.lk, focusing on limited website popularity, suspicious content indicators (Blacklisted by Security Providers, Blacklisted), hosting technology and infrastructure, SSL certificate status, website reputation across multiple databases, customer reviews from various independent platforms. We weigh these indicators to calculate the trust score.
Note: Automated systems are not perfect — while the evidence suggests risk, there is still a chance the site is legitimate. We recommend you check the website using detailed analysis or by contacting the company directly through verified channels.
To Digital Footprints
A structured view of the site's detected themes, page signals, and related online footprint elements.
Cookie Consent
This site implements a cookie-consent interface for managing tracking and data-collection preferences.
Bootstrap Framework
This site uses Bootstrap, a widely-adopted open-source framework for responsive web development. Bootstrap enables efficient creation of mobile-friendly interfaces through standardized components and styling.
Google Tag Manager
The to.lk website uses Google Tag Manager to add and update tracking tags on its website.
jQuery Library
Social Media Links
The presence of social media links on the website indicates that it references social media accounts. This signal alone does not confirm ownership or authenticity of those profiles.
Blacklisted by Security Providers
Security intelligence signal: A security-provider signal contributes to the automated assessment of to.lk. Publicly displayable provider verdicts, when available, are reported separately; some source details may be restricted by license.
Redirects to Another Domain
to.lk redirects visitors to a different domain. This can be legitimate in some migrations or forwarding setups, but it reduces transparency for users evaluating the original address.
Established Domain
This site has maintained active domain presence over time, indicating operational continuity.
Listed by Gridinsoft
Gridinsoft Internet Security classified this site as unsafe. As a VirusTotal partner, our detections contribute to broader protection across tools and browsers.
External provider warnings: 15/32 Phishing
This section shows what independent external security sources say about this site.
A warning appears when one or more sources report malware, phishing, abuse, or other safety concerns. Each row shows the source and its verdict.
If no source reports a warning, the site is shown as clear in this section.
Criminal IP
Phishing
alphaMountain.ai
Phishing
Bkav
Malicious
Certego
Phishing
DNS8
Phishing
Emsisoft
Phishing
Forcepoint ThreatSeeker
Phishing
Lionic
Phishing
Netcraft
Malicious
SafeToOpen
Phishing
SOCRadar
Phishing
Sophos
Malware
URLQuery
Malicious
VIPRE
Phishing
Webroot
Malicious
External provider results for To.lk, last checked November 15, 2026.
— VirusTotal
Domain Information
CreatedAugust 16, 2022 at 4:31 AM
Domain Age4.3 years
Registry SourceIANA
Top Level Domain.lkDomain Extension
Technical Details
HTTP status302
IP Address209.42.255.1
Hosting ProviderAS63410 PrivateSystems NetworksNL
NetworkAS63410 - PrivateSystems Networks
SSL CertificateYR2TLSv1.3 · Valid for: 3 months · from November 11, 2026 at 4:47 PM · to February 9, 2027 at 4:47 PM
Content from the analyzed website
Quoted for security analysis. These statements belong to the source website and are not endorsed by Gridinsoft.
Original page titleShort URL Generaotor - Free Short Links and Track Link Activites | ShortURL - to.lk
Original descriptionFree short URL generator with shorturl.lk | Track each and every short link inside your account and boost your brand or business awareness by analyzing.
Detection SignaturesThese signatures are used to generate the security fingerprint below.
Cookie ConsentBootstrap FrameworkjQuery LibrarySocial Media Links
Verified ServicesThis domain has been verified by the following legitimate services and organizations, confirming authentic ownership and proper email security configuration.
Google Verification
Domain ownership verified by Google.
Security FingerprintUnique identifier based on site analysis
Scammers have devised new ways to deceive users, and what was relevant ten years ago may not be applicable today. In this post, we have compiled the most current types of online scams.
If you own To.lk and want to challenge the trust score, please submit a review request via portal.gridinsoft.com. There you can claim your profile and add verified company/contact details. If you cannot access the portal, email legal(at)gridinsoft.com with proof of legitimacy and contact details. We never charge website owners for reviews or reconsideration requests. For more information, please review our Disclaimer.
Your comment is currently undergoing moderation and will be published shortly.
Help protect others by sharing this page on social media! The more people who know about to.lk, the fewer chances they have to deceive someone else.Help others evaluate to.lk by sharing this page on social media!
Help protect others by sharing this page on social media! The more people who know about to.lk, the fewer chances they have to deceive someone else. Help others evaluate to.lk by sharing this page on social media!