Security Scan Report: fileserver.devin-hk.shop

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is devin-hk.shop.

Submitted URL: https://fileserver.devin-hk.shop/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Primary domain is flagged for overlord RAT malware by two independent feeds and hosts a bare credential/login panel; treat as a malware control interface, not a legitimate service.

Risk Factors (4)
Content-malware Indicator of Compromise on the primary domain (overlord RAT, multi-source)
Credential-collecting login form on a domain flagged for malware
Unranked domain with no legitimate organisational identity
Page presents only a login panel with no supporting content
Domain age information unavailable

Details

Page Title

TankRat

Scan Type

public

Domain Name Analysis

The domain name 'fileserver.devin-hk.shop' uses the commerce-oriented generic top-level domain (.shop) with subdomain 'fileserver'. Count 8 characters in 'devin-hk' with two vowels and 5 consonants, plus 1 hyphen. Breaking it apart gives 2 words: devin, hk. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fileserver.devin-hk.shop/

Page Load Overview

4.38s
Total Load Time
274 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:36%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:36 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as id

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1585.137.60.92Singapore, Singapore
AS43180Trunk Networks LTD
151--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D4B1F0B464A60C6B810705C1E6E18B2D90AEA3599B139D7DF3F5019BDFC1F984EDC891

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:kb1pactKVXtTxQ1c0F9a5RoEpYPIdbYZ3vv2YbGOVIzOr8zvEMOu+y1ms/xVVY+3:cspqXkToEpYwdbYcYbXIm8Y1yHXjdQQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5464:hABUCDoUYQGJmVgiATBAEBQiBAEIwlAEQBACEFBkgoAAICGGCCAGQAqgsqggA6hAPAAIIkYMKEhBqDB0IEICADsBRAIAgCQK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffc310180000
Perceptual Hash:fdf5f35846268822
Difference Hash:06061606b2320c00
Wavelet Hash:fffffff300180000
Color Hash:#2dc5d2

Other Hashes

Crop Resistant:06061606b2320c00

Scan History

Scan history not available

Unable to load historical scan data