Security Scan Report: vpn.spheremama.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 4 countries across 5 domains to perform 57 HTTP transactions. The main domain is spheremama.com and was registered 11 months ago.

Submitted URL: https://vpn.spheremama.com/index.html

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Safe Browsing flags this page for social engineering; it imitates TikTok's 'TK Store' shopping brand on an unrelated, unranked domain. No credential forms present, but treat as a phishing-lure page.

Risk Factors (3)
Google Safe Browsing Social Engineering (phishing) detection on the scanned URL
Impersonation of TikTok's 'TK Store' shopping brand on a non-official, unrelated hostname
Unranked domain with no established reputation despite claiming to be a major commerce platform
Domain age information unavailable

Details

Page Title

TK Store | buy, sell and discover on TK

Scan Type

public

Domain Name Analysis

The domain 'vpn.spheremama.com' uses the commercial generic top-level domain (.com) with subdomain 'vpn'. The core label 'spheremama' covers 10 characters split between 4 vowels and 6 consonants. Breaking it apart gives 2 words: sphere, mama. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

TKStore Buyer Shop PartnerShip _ Seller Center Log in TK Store Create joy and sell more aN XN (A) cater i Omg this isstunnin: iy a Aud Get Started > G Yracgetnale sec 7 Arner v/=reh Torderd this!...

Page Load Overview

3.80s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,817 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping72% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
72%
entertainment media
62%
corporate business
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1545.135.237.29Hong Kong, Hong Kong
AS153656OWGELS INTERNATIONAL CO., LIMITED
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
32.16.10.149Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
32.16.206.5Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
32.16.10.154Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
32.16.10.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
32.16.10.157Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
32.16.10.139Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
395.100.181.15Akamai · CDNMilan, Lombardy, Italy
AS20940Akamai International B.V.
5715--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0922E22A4F17073408382E26B312F6A7FE0D567D65A8244B5BC47985FD2D83DD2B52F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:eg1utYFru4oAuZTpKqmPS3f0lyajOIRhVXX:eNtYpu4JOFKxa8h11n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19383:QAoKEUoAlIYiSCKgAcjNAB0AcGMFIhwkiBDJCJgQEEgoBSGZUV40giQCGavbAOFBDZgDAlBYShAWCCKUBIiNQEFEIgvUiwmy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff7c381f1ffffe7
Perceptual Hash:ec669399496a936c
Difference Hash:1b26272323588696
Wavelet Hash:fde3818191ffc301
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data