to.lk favicon

to.lk

Category: Phishing

Scanned: Jul 16, 2026, 08:34 PM UTC · First seen: Jul 16, 2026 · Threat Engines: 12 / 91 · Times Scanned: 1
5 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Dangerous
0 - High Risk50 - Moderate100 - No Threats
Fresh scan recommended
Last scanned 9 days ago - security status may have changed since then.
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Protect yourself from potentially harmful websites
Combo Cleaner's real-time web protection module actively blocks access to scam, phishing & malware-infected websites.
★★★★★ 4.8 / 5 Recommended by PCrisk.com editors Windows · Mac · Android · iOS
Download Combo Cleaner Free scan · no signup

To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Screenshot of to.lk Captured Jul 16, 2026
https://to.lk
Screenshot of to.lk
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
36 years
Not Ranked - This website does not appear in the Tranco top list
Flagged by 12 of 91 engines
✓ Valid (TLS)
PrivateSystems Networks EU Ltd
Amsterdam, The Netherlands
LiteSpeed
LiteSpeed
209.42.255.1
Domain & WHOIS Information
Registrar Unknown
Registered June 15, 1990
Expires Unknown
Name Servers D.NIC.LK
DNSSEC Signed
Hosting PrivateSystems Networks EU Ltd
Reputation & Threat Check 91 security engines checked
12
12 of 91 engines flagged this website Flagged by 12 security vendors at the time of scanning
Not flagged Flagged
Flagged by 12 of 91 engines
Direct Threat Database Sources
View detailed engine results on VirusTotal
File Scan Summary Powered by Quttera Engine
34 files scanned
No threats
23
Low Risk
0
Medium Risk
1
High Risk
10
No threats Low Risk Medium Risk High Risk
shorturl.lk/pricing 13.6 KB Flagged: high risk
shorturl.lk/login.php 15.1 KB Flagged: high risk
shorturl.lk/about-short-url 17.3 KB Flagged: high risk
shorturl.lk/features 13.6 KB Flagged: high risk
shorturl.lk/login 15.1 KB Flagged: high risk
shorturl.lk/forgot-password 9.8 KB Flagged: high risk
shorturl.lk/privacy 16.6 KB Flagged: high risk
shorturl.lk/contact-us 12.9 KB Flagged: high risk
shorturl.lk/# 35.1 KB Flagged: high risk
shorturl.lk/sign-up 15.3 KB Flagged: high risk
/index Flagged: medium risk
shorturl.lk.http-redirect 72 B No threats
shorturl.lk/style.css 88.3 KB No threats
code.jquery.com/jquery-3.6.0.min.js 87.4 KB No threats
shorturl.lk/checkout/# 1.2 KB No threats
shorturl.lk/js/%24%7Bt%7D 1.2 KB No threats
shorturl.lk/js/%7Bembed%7D%7Bparams%7D 1.2 KB No threats
shorturl.lk/js/all-js-libraries.js 346.3 KB No threats
shorturl.lk/js/active.js 17.2 KB No threats
shorturl.lk/css/all-css-libraries.css 376.7 KB No threats
shorturl.lk/css/custom.css 1023 B No threats
Show 13 more...
Quttera flagged high risk files - is this your website?
Investigate and remove potential threats with Quttera
Remove Malware

Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.

External Links & Domains
60
External Links
36 Flagged
0
Iframes
Clean
18
Referenced Domains
2 Flagged
38
Flagged Resources
Detected
shorturl.lkFlagged: Generic Malicious Object
to.lkFlagged: Generic Malicious Object
http://to.lk/${t}Flagged: Generic Malicious Object
http://to.lk/about-short-urlFlagged: Generic Malicious Object
http://to.lk/featuresFlagged: Generic Malicious Object
http://to.lk/forgot-passwordFlagged: Generic Malicious Object
http://to.lk/img/core-img/custom-alias.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/hero-2.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/local-domain.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/reasons-to-use-short-url.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/short-url-create.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/short-url-lk-home-banner.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/short-url-stats.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/wm.pngFlagged: Generic Malicious Object
http://to.lk/loginFlagged: Generic Malicious Object
http://to.lk/qr_download.php?url%3DFlagged: Generic Malicious Object
http://to.lk/sign-upFlagged: Generic Malicious Object
http://to.lk/{embed}{params}Flagged: Generic Malicious Object
https://shorturl.lk/Flagged: Generic Malicious Object
https://shorturl.lk/about-short-urlFlagged: Generic Malicious Object
https://shorturl.lk/app/qr_img.php?size%3DM&fore%3D0xFFFFFF&back%3DFlagged: Generic Malicious Object
https://shorturl.lk/app/qr_img.php?size%3DS&fore%3D0xFFFFFF&back%3DFlagged: Generic Malicious Object
https://shorturl.lk/checkout/Flagged: Generic Malicious Object
https://shorturl.lk/contact-usFlagged: Generic Malicious Object
https://shorturl.lk/css/all-css-libraries.cssFlagged: Generic Malicious Object
https://shorturl.lk/css/custom.cssFlagged: Generic Malicious Object
https://shorturl.lk/featuresFlagged: Generic Malicious Object
https://shorturl.lk/img/core-img/favicon.pngFlagged: Generic Malicious Object
https://shorturl.lk/img/core-img/short-url-generator-logo-footer.pngFlagged: Generic Malicious Object
https://shorturl.lk/img/core-img/short-url-generator-logo-header.pngFlagged: Generic Malicious Object
https://shorturl.lk/js/active.jsFlagged: Generic Malicious Object
https://shorturl.lk/js/all-js-libraries.jsFlagged: Generic Malicious Object
https://shorturl.lk/loginFlagged: Generic Malicious Object
https://shorturl.lk/login.phpFlagged: Generic Malicious Object
https://shorturl.lk/pricingFlagged: Generic Malicious Object
https://shorturl.lk/privacyFlagged: Generic Malicious Object
https://shorturl.lk/sign-upFlagged: Generic Malicious Object
https://shorturl.lk/style.cssFlagged: Generic Malicious Object
http://to.lk/${t}Flagged: Generic Malicious Object
http://to.lk/about-short-urlFlagged: Generic Malicious Object
http://to.lk/featuresFlagged: Generic Malicious Object
http://to.lk/forgot-passwordFlagged: Generic Malicious Object
http://to.lk/img/core-img/custom-alias.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/hero-2.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/local-domain.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/reasons-to-use-short-url.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/short-url-create.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/short-url-lk-home-banner.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/short-url-stats.pngFlagged: Generic Malicious Object
http://to.lk/img/core-img/wm.pngFlagged: Generic Malicious Object
http://to.lk/loginFlagged: Generic Malicious Object
http://to.lk/qr_download.php?url%3DFlagged: Generic Malicious Object
http://to.lk/sign-upFlagged: Generic Malicious Object
Show 45 more...
shorturl.lkFlagged: Generic Malicious Object
to.lkFlagged: Generic Malicious Object
accounts.google.comNot flagged
cloud.google.comNot flagged
code.jquery.comNot flagged
connect.facebook.netNot flagged
developers.google.comNot flagged
docs.cloud.google.comNot flagged
google.comNot flagged
pinterest.comNot flagged
support.google.comNot flagged
twitter.comNot flagged
www.facebook.comNot flagged
www.google.comNot flagged
www.googletagmanager.comNot flagged
Show 3 more...
to.lk Overview

Description of to.lk

The domain to.lk appears to host a URL-shortening service branded as "ShortURL" and linked closely with shorturl.lk. Based on the page title, metadata, and screenshot, the site offers users a way to create shortened links, manage accounts, and track link activity for branding or analytics purposes. The homepage includes standard navigation items such as features, support, pricing, login, and sign-up, which suggests a web application rather than a simple landing page.

The domain itself is very old and uses Sri Lanka's .lk namespace, but the visible service appears to be a modern link-shortening platform rather than a government or institutional site. The operator is not clearly identified in the provided scan data, so ownership cannot be confirmed from this snapshot alone. Functionally, the site appears intended for link redirection, sharing, and campaign tracking, which are common uses for short-link services.

Safety Assessment for to.lk

This website raises significant concerns based on the available scan results. At the time of this scan, it was flagged by 12 out of 91 security engines, with multiple detections describing the site as phishing or malicious. In addition, the malware scan marked numerous pages and assets as suspicious or malicious, including login, sign-up, pricing, privacy, and contact-related paths. A URL-shortening service can also introduce additional risk because shortened links may obscure the final destination from visitors.

Blacklist and reputation data also show adverse signals. While some major content-malice databases were clean at the time of this scan, the domain was listed by at least one phishing-focused threat database and another malware-oriented provider. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than direct website-malice detections but still worth noting as a caution.

The site does present as a functioning service rather than a parked page, and the domain age is unusually long, which can sometimes indicate an established asset. However, the multi-engine phishing consensus is a much stronger signal than age alone. Based on these findings, this website may pose potential risks to visitors.

Technical Description

The site uses a valid Let's Encrypt SSL certificate that, at the time of this scan, was set to expire on 2026-10-10. DNSSEC appears to be enabled and signed, which is a positive integrity signal for DNS responses. The web server is reported as LiteSpeed, hosted on infrastructure associated with PrivateSystems Networks EU Ltd in Amsterdam, Netherlands.

From a security perspective, the main concerns are not the TLS setup itself but the reputation findings around the hosted content and linked resources. The scan also shows extensive internal references between to.lk and shorturl.lk, suggesting the service may operate across both domains. No protocol-level weakness was provided in the scan data, but the content-level detections are substantial enough to outweigh otherwise routine infrastructure signals.

HTTP Redirect Chain
302 https://to.lk/
200 https://shorturl.lk/
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Phishing
Rank History (30 days)
No rank data available
5 cookies detected
Essential3
Analytics2
Advertising0
Social0
0 1st party cookies
5 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for to.lk, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?