ScanMalware.com

Security Scan Report: shop.nts.live

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4c792865-42de-47a8-99e8-0f481de79244Domain and IP registration (RDAP)/api/v1/rdap/4c792865-42de-47a8-99e8-0f481de79244How often this domain was scanned/api/v1/domain/stats/shop.nts.liveScan history for this domain/api/v1/domain/history/shop.nts.live?limit=15
This website contacted 19 IPs in 3 countries across 14 domains to perform 399 HTTP transactions. The main domain is nts.live and was registered 11 years ago.

Submitted URL: https://shop.nts.live

The Cisco Umbrella rank of the primary domain is #169,618 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

On-page evidence is the legitimate, 11-year-old NTS official Shopify store with no credential or payment forms and no clickfix lure. However, a single-source unverified ThreatFox 'IClickFix' report on shop.nts.live triggers the content-malware escalation floor; treat with caution until corroborated.

Risk Factors (2)
Unverified single-source threat-intel match (IClickFix) attributed to the primary domain shop.nts.live — corroboration is absent, so the indicator could be stale, misattributed, or a subdomain-level false positive
Subdomain shop.nts.live is far less known than the parent nts.live and could be repurposed or compromised independently of the broadcast site
Domain age information unavailable

Details

Page Title

NTS - NTS Official Shop

Scan Type

public

Domain Name Analysis

Within the .live top-level domain, 'shop.nts.live' is registered and includes subdomain 'shop'. The core label 'nts' covers 3 characters split between 0 vowels and three consonants. Splitting it apart reveals 1 word: nts. No strong language cues emerged from the frequency lists.

Screenshot

TERS GET 20% OFF- UBSCRIBE NOW FREE UK SHIPPING ON ORDERS OVER £100 NTS SUPPORTERS GET 20% OFF UBSCRIBE NOW FREE UK SHIPPING ON ORDERS OVER £100 NTS SUPPORTERS GET 20% OF} ‘SUBSCRIBE NOW FREE UK SH...

Page Load Overview

3.22s
Total Load Time
6.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:87,452 chars
Detector Agreement:80%

Website Classification

Primary Category

e-commerce shopping53% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
53%
technology software
41%
finance banking
40%
adult content
38%
healthcare medical
37%

Detected Features

Search
Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2123.227.38.74Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
21142.251.14.97Google · CDNUnited States
AS15169Google LLC
2123.227.39.20Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
2134.144.250.199Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2113.226.244.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
21216.198.53.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
2113.32.99.103Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
21172.64.147.18Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2134.160.147.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
21216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
39919--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1249598D664723402EC07167DB4EAF22B88097647D271E98C7BBC87609F61F5BADE7024

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:iy5pBoyiTDssdVTNuJk6C3N2xILo2NMw5ebwHtNhZZuJVsMw+QYFq:ica

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2019755:AAJAAC4SIE8APY8VQIdCA2UISAJWAw5HAuYIMFADWBYYigRoDDAlFpAIk4MoBRhCImwRCcGEoQEgAABY5gCcgAgYLcAOQQLK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff777777723200fe
Perceptual Hash:84909b6be90ff10f
Difference Hash:a8aca4e4c6c66666
Wavelet Hash:7f575657503000fe
Color Hash:N/A

Other Hashes

Crop Resistant:a8aca4e4c6c66666,0100b649ca240001,7434363a5b5d2d83,6c6d379e9f4fe763,bc3d0703872612b9,30323d1e564b6d6d,058f33438d948ea1

Scan History

Scan history not available

Unable to load historical scan data