ScanMalware.com

Security Scan Report: truelabs.in

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2890378a-45a5-474f-b1db-8a7445a6ae9dDomain and IP registration (RDAP)/api/v1/rdap/2890378a-45a5-474f-b1db-8a7445a6ae9dHow often this domain was scanned/api/v1/domain/stats/truelabs.inScan history for this domain/api/v1/domain/history/truelabs.in?limit=15
This website contacted 8 IPs in 3 countries across 7 domains to perform 34 HTTP transactions. The main domain is truelabs.in and was registered 9 years ago.

Submitted URL: https://truelabs.in

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Established truelabs.in appears compromised: ClearFake/EtherHiding blockchain loader and Powershell-injector script from cdn.quickdelivr.com are injected, with CRITICAL EtherHiding IDS alerts and off-topic casino SEO spam.

Risk Factors (6)
ClearFake/EtherHiding blockchain loader injected into page HTML (analyst-vetted malicious kit)
CRITICAL IDS malware alerts for EtherHiding exfiltration
Page scripts contact quickdelivr.com CDN flagged as Powershell injector by three independent threat feeds
Primary domain reported as malware 'unknown loader' — strong indication of site compromise
Hidden injected casino/pharma-style SEO spam links to unrelated, partly flagged domains
Unranked third-party script host delivering code to visitors
Domain age information unavailable

Details

Page Title

True Labs – Quality is our strength!

Scan Type

public

Domain Name Analysis

Domain 'truelabs.in' uses the Indian country-code top-level domain (.in) and has no subdomain. The registrable portion 'truelabs' spans 8 characters containing three vowels alongside 5 consonants. Tokenizing the label suggests two words: true, labs. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

PHP_INJECT_OK oe HOME — KASZINO ONLINE —_ ZAHRANICNICASINA — BETOVIS.-—_— CESKE ONLINE KASINA. LEGJOBB LEGALIS ONLINE KASZINOK Explore the user-friendly interface of the manga casino website to en...

Page Load Overview

9.26s
Total Load Time
817 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:92,691 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software76% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
76%
entertainment media
73%
gambling betting
72%
cryptocurrency blockchain
66%
government public service
57%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6148.72.90.66Singapore, Singapore
AS26496GoDaddy.com, LLC
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
495.129.234.18Russia
AS57724Ddos-guard Ltd
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
43.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
474.125.29.95Google · CDNUnited States
AS15169Google LLC
495.129.234.12Russia
AS57724Ddos-guard Ltd
348--

Detected Technologies12

WordPressv4.7.23
100%
MetaGenerator
100%
JQueryv1.12.4
100%
Bootstrapv1.3.0
100%
Windows Server
50%
PHP
50%
MySQL
50%
Plesk
40%
Microsoft ASP.NET
40%
IISv10.0
40%
jQuery Migrate
20%
OWL Carousel
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10184DA7BC0831229470AB384F621E73CDA2341D9FE93190D935E9BD6F4996F9C2362D9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vPNNtAW9tFTcxt3l8NEorLb+jkc6eAZqHng7c7U8nSB5xt3l8NEorLb+jkc6eAZW:v+W9L5dP8nSBwdP8nSB0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:380591:UR1AIRWRE1oYBwQGwAFpBVEWKwWCyFBymJPoMJAF0mGeUxg8hJAMCkFEIFBNACkiJDVeFm6wQaI4ikIKAiygGAYAnAAj0Aiq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7820000ffdf9f9f
Perceptual Hash:bc65bcb5e00e23c3
Difference Hash:9432822000282020
Wavelet Hash:c6820000ffcf9f9f
Color Hash:N/A

Other Hashes

Crop Resistant:9432822000282020

Scan History

Scan history not available

Unable to load historical scan data