Used m.sesame.org? Share your experienceUsed this site? Rate itRate it · review · follow updates

Rate m.sesame.org

One tap is enough. Reviews are moderated and never change our Safety Score.

Is m.sesame.org safe?

http://m.sesame.org/

SafeStatus
Community ratingNo reviews yet · Write oneCommunity reviews are separate from our Safety Score.

Checked on

How we checked

Coverage: partial · 5 of 6 applicable core capabilities

  • Antivirus (83 of 92 engines answered) · saved result: did not fully complete
  • Google Safe Browsing: completed
  • page reading: completed
  • page capture: completed
  • domain records: completed
  • web research: completed
Verdict

A Sesame Workshop short-link subdomain that simply forwards to Bitly's own branded-link marketing page

m.sesame.org is a subdomain of sesame.org, the long-established parent domain behind Sesame Workshop, and it is set up as a branded short domain run through Bitly. With no specific link attached, the address forwards the browser to Bitly's own branded-short-domains landing page, which advertises Bitly's paid and free plans. No malware, phishing or deceptive commercial mechanism was observed, so the score sits in the Safe band with the caveat that the destination is a third-party marketing page rather than Sesame content.

Treat m.sesame.org as a legitimate short-link address: if you followed a specific Sesame Workshop link it should forward you onward, and if you typed the bare address you will simply land on Bitly's marketing page. Do not enter credentials or payment details on that Bitly page unless you actually intend to sign up for Bitly, and check the final destination of any short link before trusting the page it opens.

Tell us the verdict looks wrong

m.sesame.org · Staff read every report. Your message is never published, and feedback never changes the score automatically.

What looks wrong?

Share this report

m.sesame.org: Safe — MalwareTips website safety report

Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

Score explained

Why 88/100

Safe covers scores 85–100. No adverse finding was saved; 3 pushed it up.

What pulled the score down

No adverse finding was saved with this report.

What pushed the score up

  • SupportsThe registrable domain is 10918 days old (sesame.org, the parent domain of this subdomain host; it does not show how long the subdomain itself has existed)
  • SupportsThe browser threat feed returned no threat warning
  • SupportsThe saved TLS check found a valid encrypted connection

Community reviews never change the Safety Score.

01 · Investigation Brief

Investigation Brief

m.sesame.org is a subdomain of sesame.org, the long-established parent domain behind Sesame Workshop, and it is set up as a branded short domain run through Bitly. With no specific link attached, the address forwards the browser to Bitly's own branded-short-domains landing page, which advertises Bitly's paid and free plans. No malware, phishing or deceptive commercial mechanism was observed, so the score sits in the Safe band with the caveat that the destination is a third-party marketing page rather than Sesame content.

A branded short domain, not a standalone website

The host sits under sesame.org, a registrable domain that is over 10,900 days old; that age describes the parent domain and does not show how long this particular subdomain has existed.

Visiting the bare address does not load a Sesame page: the browser is redirected to bitly.com's branded-short-domains landing page, which is the standard behaviour of a short-link service when no target link is supplied.

The only commercial content belongs to the link provider

The landing page carries Bitly's own sign-up and pricing calls to action, such as "Sign up Free", "Get started for free", "Pricing" and "Show me my options". These are the link provider selling its service, not a funnel attached to the scanned host.

The page also includes standard service terms covering paid accounts, use of services, liability and governing law, consistent with a mainstream commercial link-management product.

Clean technical checks, with the destination's contacts not attributed

The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection, so there is no technical signal of malware, phishing or interception on this address.

Because the address redirects to another site, that site's contact details were not attributed to the scanned host; the landing page itself was read, so this is a scoping note rather than a missing-content warning.

Why the score is 88

The saved checks and analysis found no material threat. Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Collected signals and independent provider data for this URL.

Antivirus Engines

0/ 92

No detections

Saved analysis from May 25, 2022 - stale

No detections across 83 engines that rated this URL

No antivirus engine that answered raised an adverse result; 9 had no rating for this URL. This is one signal, not a guarantee.

Malicious
0
Suspicious
0
Total
92
All 92 engine results
  • 0xSI_f33d - Unrated
  • Abusix - Clean
  • Acronis - Clean
  • ADMINUSLabs - Clean
  • AICC (MONITORAPP) - Clean
  • AlienVault - Clean
  • alphaMountain.ai - Clean
  • Antiy-AVL - Clean
  • Armis - Clean
  • Artists Against 419 - Clean
  • AutoShun - Unrated
  • Avira - Clean
  • BADWARE.INFO - Clean
  • Baidu-International - Clean
  • benkow.cc - Clean
  • Bfore.Ai PreCrime - Clean
  • BitDefender - Clean
  • BlockList - Clean
  • Blueliv - Clean
  • Certego - Clean
  • Chong Lua Dao - Clean
  • CINS Army - Clean
  • CMC Threat Intelligence - Clean
  • Comodo Valkyrie Verdict - Unrated
  • CRDF - Clean
  • Cyan - Unrated
  • CyberCrime - Clean
  • CyRadar - Clean
  • Cyren - Clean
  • desenmascara.me - Clean
  • DNS8 - Clean
  • Dr.Web - Clean
  • EmergingThreats - Clean
  • Emsisoft - Clean
  • EonScope - Clean
  • ESET - Clean
  • Feodo Tracker - Clean
  • Forcepoint ThreatSeeker - Clean
  • Fortinet - Clean
  • Fortra - Unrated
  • FraudScore - Clean
  • G-Data - Clean
  • Google Safe Browsing - Clean
  • GreenSnow - Clean
  • Heimdal Security - Clean
  • Hoplite Industries - Clean
  • IPsum - Clean
  • K7AntiVirus - Clean
  • Kaspersky - Clean
  • Lionic - Clean
  • Lumu - Unrated
  • MalBeacon - Clean
  • MalSilo - Clean
  • Malwared - Clean
  • MalwareDomainList - Clean
  • MalwarePatrol - Clean
  • malwares.com URL checker - Clean
  • Netcraft - Clean
  • NotMining - Unrated
  • Nucleon - Clean
  • OpenPhish - Clean
  • Phishing Database - Clean
  • Phishtank - Clean
  • PREBYTES - Clean
  • Quick Heal - Clean
  • Quttera - Clean
  • Rising - Clean
  • SafeToOpen - Unrated
  • Sangfor - Clean
  • Scantitan - Clean
  • SCUMWARE.org - Clean
  • SecureBrain - Clean
  • securolytics - Clean
  • Snort IP sample list - Clean
  • Sophos - Clean
  • Spam404 - Clean
  • StopBadware - Unrated
  • StopForumSpam - Clean
  • Sucuri SiteCheck - Clean
  • Tencent - Clean
  • ThreatHive - Clean
  • Threatsourcing - Clean
  • Trustwave - Clean
  • URLhaus - Clean
  • ViriBack - Clean
  • Virusdie External Site Scan - Clean
  • VX Vault - Clean
  • Web Security Guard - Clean
  • Webroot - Clean
  • Yandex Safebrowsing - Clean
  • ZeroCERT - Clean
  • zvelo - Clean

How security vendors categorise this site

  • Comodo Valkyrie Verdictmedia sharing
  • Forcepoint ThreatSeekereducational institutions

Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

What we observed

CAPTURED PAGE
m.sesame.org
Visual analysis

Visual context from the captured page

bitly

Context only

What the captured page showed

1 observation
  1. 01

    bitly

What the page says about itself

What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.

Page title
Custom BSD Landing Page - Bitly

Pages we read

  • Main page/pages/landing/branded-short-domains-powered-by-bitlyRead
  • About page/pages/about/Read
  • Terms/pages/terms-of-service/Read
  • Contact page/pages/contact/Read
  • Pricing/pages/pricing/Read

03 · Investigation Story

Investigation story

The behavior, reputation, and operator evidence that explains how this site may affect a visitor.
  1. What the site claims

    Custom BSD Landing Page - Bitly

  2. What we observed

    The page content was captured and checked alongside 83 antivirus results.

  3. What independent research found

    The search completed without a material external warning or corroborating report.

  4. What remains unverified

    1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

Web research findings

Independent findings for m.sesame.org, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.

Business registration
Not checked
This report did not include a company-registry lookup, so no registration result is claimed.
Clone check
Not checked
No site-clone comparison was run for this report, so no clean result is claimed.
Typosquat check
Not checked
No look-alike domain comparison was run for this report, so no clean result is claimed.
Web mentions
No scam reports found
The completed search returned no sourced scam reports or complaints.

No independently sourced scam reports or credibility records were found for m.sesame.org. That is common for new or low-traffic sites and does not clear the site.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Infrastructure map

How the saved page connected to the wider web.

  1. Domainm.sesame.org
  2. Redirects tobitly.com
  3. Hosted byBitly Inc
  4. Referencesmkt-bitly-media.qrcg.net · accounts.google.com

Domain Timeline

  1. Dec 6, 1996
    Domain registered

    First appeared in WHOIS records — 29 years old when this review was saved.

  2. Oct 28, 2026
    Saved security review — Rated Safe

    This saved scan found no active threat signals in the checks it completed.

m.sesame.org has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found
Contact details were not attributed (the address redirects to another site)
Emails on site's domainNot reviewed
Phone numbersNot reviewed
Postal addressNot reviewed
Linked social profiles0

Domain & Encryption

Domain History
Age29 years old
RegistrarGoDaddy.com, LLC
Registrar IANA ID146
RegisteredDec 6, 1996
ExpiresDec 5, 2026
Last updatedAug 12, 2026
RegistrantNot published (privacy or GDPR redaction)
Owner privacyUnknown (owner not published)
Nameserversns-1303.awsdns-34.orgns-1558.awsdns-02.co.ukns-244.awsdns-30.comns-953.awsdns-55.netDNS by Amazon Route 53
Registrar abuse contactabuse@godaddy.com · +1.4806242505
Verified ownerNo owner has verified this domain on MalwareTips
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerAmazon · Amazon RSA 2048 M01
IssuedJul 23, 2026 (97 days before this scan)
ExpiresFeb 5, 2027 (100d)
Self-signedNo
Trusted chainYes: our check verified the issuer chain
Matches hostnameYes, for bitly.com

This is the certificate of bitly.com, the site this URL lands on. Certificate issued for *.bitly.com.

Hosting & Technology
HostingBitly Inc
Server IP67.199.248.15 · shared CDN edge

A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it. This is the address of bitly.com, the site this URL lands on.

Server locationUnited States (US)
Web servernginx
Platform / CMSWPML ver:4.9.6 stt:1,4,3,21,25,27,42,2,5
PopularityRadar ranks sesame.org, not this subdomain
Technologies and payments

Analytics and ads

  • Google Tag Manager

Payment providers the page loads

None seen among the outside domains we saved.

Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1302http://m.sesame.org/
  • 2206https://bitly.com/pages/landing/branded-short-domains-powered-by-bitlycross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPBitly Inc
Usage typeContent Delivery Network

Referenced Domains

05 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.
  1. Antiviruspartial
  2. Browser threat feedcomplete
  3. Page contentcomplete
  4. Analysiscomplete
  5. Visual evidencecomplete
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

unknown

Malware, phishing, credential theft and hostile infrastructure.

No confirmed evidence in this dimension.

Operator / customer risk

unknown

Complaints, withdrawals, business conduct and commercial traps.

No confirmed evidence in this dimension.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result0 of 92 engines flagged
CompletionLimitedFindingNo saved finding
Freshnessstale fallback · analysed May 25, 2022
Browser protection
ResultNo browser threat-list match
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Oct 28, 2026
Page content
ResultPage fetched · HTTP 200
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Oct 28, 2026
Visual evidence
Result1 visible observation saved with the page capture
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Oct 28, 2026
Independent research
ResultThe search completed without a material external finding
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Oct 28, 2026

06 · Your Next Move

Your next move

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  1. Double-check the exact URL in your address bar

    Confirm you are actually on m.sesame.org and not a lookalike like verify-m.sesame.org or an IDN homoglyph.

  2. Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  3. Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

07 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is m.sesame.org legit and safe?
Our automated security review found no threat indicators on m.sesame.org, so it appears legitimate. All 83 antivirus engines that rated it reported it clean in the saved analysis from May 25, 2022, and the parent domain sesame.org is 29 years old, registered on December 6, 1996. Even so, always double-check the exact address in your browser, because phishing emails routinely spoof real, trusted domains like this one.
Is m.sesame.org safe to use?
m.sesame.org has a Safety Score of 88/100 (Safe). The saved checks and analysis found no material threat at scan time. Treat unexpected login or payment requests with normal caution.
Could a legitimate site like m.sesame.org still be used in a scam?
Yes — and this is worth understanding. Even trustworthy domains get spoofed in phishing emails (a fake message that only looks like it's from m.sesame.org), and legitimate sites are occasionally compromised on specific pages. A clean verdict means the site itself checks out today; it does not mean every email or link claiming to be from m.sesame.org is genuine. Always reach the site by typing the address yourself rather than clicking links in unexpected messages.
Has m.sesame.org been flagged by antivirus engines?
No — all 83 antivirus and blocklist engines in our malware network that rated it reported m.sesame.org as clean in the saved analysis from May 25, 2022. 9 other engines had no rating for it. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
Is m.sesame.org on any phishing or malware blacklists?
No — m.sesame.org is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the m.sesame.org domain?
m.sesame.org is a subdomain of sesame.org, which is 29 years old, registered on December 6, 1996 through GoDaddy.com, LLC. That is the parent domain's registration age: it does not show how long m.sesame.org itself has existed or who runs it, so it is weighed alongside the other checks.
Does m.sesame.org have a valid SSL certificate?
Yes — m.sesame.org presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, valid for another 100 days. Important caveat: SSL only encrypts the connection between you and the site — it does not verify who runs it. Almost all scam sites now have valid SSL too, so a padlock alone never means "safe".
Where is m.sesame.org hosted?
m.sesame.org resolves to an IP operated by Bitly Inc in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
How often is the m.sesame.org report updated?
This report is a record of the scan run on October 28, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about m.sesame.org has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
88/100
Safe

A Sesame Workshop short-link subdomain that simply forwards to Bitly's own branded-link marketing page

Saved capturem.sesame.orgCapture-safe
Captured during this scan. Opening this report does not revisit the site.
Conclusion

m.sesame.org is a subdomain of sesame.org, the long-established parent domain behind Sesame Workshop, and it is set up as a branded short domain run through Bitly. With no specific link attached, the address forwards the browser to Bitly's own branded-short-domains landing page, which advertises Bitly's paid and free plans. No malware, phishing or deceptive commercial mechanism was observed, so the score sits in the Safe band with the caveat that the destination is a third-party marketing page rather than Sesame content.

Recommended actionTreat m.sesame.org as a legitimate short-link address: if you followed a specific Sesame Workshop link it should forward you onward, and if you typed the bare address you will simply land on Bitly's marketing page. Do not enter credentials or payment details on that Bitly page unless you actually intend to sign up for Bitly, and check the final destination of any short link before trusting the page it opens.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

First-hand experiences add human context after the scanner has reached its conclusion.

Are you the owner of m.sesame.org?Verify and reply