Security Scan Report: viva-glade.shop

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is viva-glade.shop.

Submitted URL: https://viva-glade.shop/

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Analyst-vetted kit match plus a CRITICAL hunting-rule hit identify this page as the login panel of an Overlord/TankRat remote-access-tool C2 server. Do not enter credentials; block and report the host.

Risk Factors (3)
Confirmed malicious tooling: login interface of an Overlord/TankRat remote-access-tool C2 panel (analyst-vetted roster match)
CRITICAL severity hunting-rule detection for a C2 panel login page
Credential collection form (username + password + 6-digit code) serving operator access to a surveillance/backdoor tool
Domain age information unavailable

Details

Page Title

TankRat

Scan Type

public

Domain Name Analysis

The domain 'viva-glade.shop' uses the commerce-oriented generic top-level domain (.shop). The registrable portion 'viva-glade' spans 10 characters split between 4 vowels and five consonants, plus 1 hyphen. Splitting it apart reveals two words: viva, glade. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://viva-glade.shop/

Page Load Overview

3.89s
Total Load Time
274 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:36%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:36 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as id

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15176.97.117.181Singapore, Singapore
AS43180Trunk Networks LTD
151--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12BB1127464A60C6B820715D0E6E18B1D50AEA329DB239D79F3F404DBDF82F984EDC892

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:csplhXIZToEpYwdbYcYbXIm8Y1yo1BSorL/+j:cspvInuXbyKBr3/G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5297:gCUUiEIIgYEQAUGUMAAAEhAwBAmGEFkAEDAZISTAFsVTQBCAYAUBEQAFAiEABEgEaQlCEEYAQkBLKCCAEAIiIQiQOEEAgCTC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffc310180000
Perceptual Hash:fdf5f35842268c22
Difference Hash:06061606b2320c00
Wavelet Hash:fffffff300180000
Color Hash:#a2e06c

Other Hashes

Crop Resistant:06061606b2320c00

Scan History

Scan history not available

Unable to load historical scan data