Security Scan Report: www.tkpl.in

Redirected to:
https://tkpl.in/shell.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 9 domains to perform 58 HTTP transactions. The main domain is tkpl.in and was registered 21 years ago.

Submitted URL: https://www.tkpl.in/shell.php

Effective URL:
https://tkpl.in/shell.php
Redirected

AI Security Verdict

High Risk

Confidence: 68%

8
Risk Score

Established logistics company site, but the requested /shell.php path is a classic web-shell location flagged as malware by threat intel, indicating a likely compromise. Page itself is a 404 with no forms harvesting data. Avoid requesting this path; site owner should audit for malicious uploads.

Risk Factors (3)
Requested URL is a known web-shell path (/shell.php) flagged as web-shell/malware by threat intelligence
Primary domain tkpl.in has malware reports against it, suggesting the legitimate site was compromised
Single-source, unverified threat-intel submissions (4 matches, 0 corroborated)
Domain age information unavailable

Details

Page Title

Page not found - Logistics Company in India Tulsidas Khimji Pvt Ltd | Global Logisticsother network

Scan Type

public

Domain Name Analysis

Within the Indian country-code top-level domain (.in), 'www.tkpl.in' is registered with subdomain 'www'. The registrable portion 'tkpl' spans 4 characters split between zero vowels and 4 consonants. Segmentation suggests 2 words: tk, pl. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

> " = (+91) 9594901075 MON - FRI: 9.30 AM - 5.45 PM TULSIDAS KRIMLIT 9 © EEOC 2, exons MAD (+91) 22-66831818 SAT: 9.30 AM - 2.30 PM HOME DISCOVERTK ¥ FIND YOUR SOLUTION Y MEDIAROOM CAREERS = GETA Q...

Page Load Overview

9.04s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:1,573 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(91%)🇪🇪et(9%)

Website Classification

Primary Category

social media network78% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
78%
corporate
35%
corporate business
32%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4167.23.166.225Asheville, North Carolina, United States
AS15085Immedion, LLC
8104.26.0.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4142.251.127.154Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4104.26.1.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.127.156Google · CDNUnited States
AS15169Google LLC
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
5812--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B083E5F12D8D183E46232AC8F4AEBB0D636E9035CE414851B7FCC79C4ED6E94366168E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:CjhcDWdxQCbweGeWLrsHBmjtmeBRd8QvvJeDxAkifC1nmxQTv0y/5DIdEfY0x/bs:C6DWdTPnmklrw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82599:AQBHIGIlAICUEVSjCWgpEhQY8EBoRQohBCGcRAKzNRCAOJAwlrAgJciLzlI7oGSkHwURgCgBEAoghmLMQgDEpSOoRRJAXCQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c1c3ffe7ffe7ff00
Perceptual Hash:e3e949e86bc342c9
Difference Hash:2b3388cc8c8c9874
Wavelet Hash:c1c3ffe7e7670000
Color Hash:07000000007

Scan History

Scan history not available

Unable to load historical scan data