Security Scan Report: hoscindia.in

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 111 HTTP transactions. The main domain is hoscindia.in and was registered 5 years ago.

Submitted URL: https://hoscindia.in

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate waterproofing company site (hoscindia.in) appears compromised: an injected ClickFix 'Human Verification' overlay and an EtherHiding blockchain loader push malware. Critical IDS and kit-roster hits confirm. Do not interact.

Risk Factors (5)
Injected ClickFix 'Human Verification' overlay instructing Windows users to open Terminal and paste attacker-supplied commands
EtherHiding blockchain-based loader / dead-drop resolution via Polygon RPC
Obfuscated JavaScript concealing known-attacker hosts (1rpc.io, polygon.drpc.org, tenderly.co)
Unranked external script host browse-codes-enter.beer consistent with exploit-kit infrastructure
Multiple CRITICAL network IDS malware/exploit-kit alerts on page traffic
Domain age information unavailable

Details

Page Title

House of Specialty Coating – We are experts in Water-proofing your structures right from Basement to Rooftop

Scan Type

public

Domain Name Analysis

Within the Indian country-code top-level domain (.in), 'hoscindia.in' is registered without a subdomain. The second-level label 'hoscindia' is 9 characters long holding four vowels versus five consonants. Splitting it apart reveals 3 words: hos, c, india. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hoscindia.in

Page Load Overview

8.15s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,477 chars
Detector Agreement:75%

Website Classification

Primary Category

adult content54% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
54%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20192.124.249.59Menifee, California, United States
AS30148Sucuri
13142.251.14.95Google · CDNUnited States
AS15169Google LLC
1323.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
13192.178.183.94Google · CDNUnited States
AS15169Google LLC
1323.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
13150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
13178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
13184.30.208.203Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1118--

Detected Technologies8

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1950454613E87182A321F03DF9047720C60CADEF5E91AB6D5F4B6D12852F9ED237E2619

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/RnAlVe+004ypLERawaC5nrwnKj0iBfQL7EETBM/81Hl1GsjQlY:/B+00ZUyKjNQBs8n+2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:182181:2W0AwSCJIIAji8QKA0UHNJpqBQygAYggAIKUAQRjYE+oMzkA5AmSCEgRAgW8jBCUQRyBpGJztrHbBIJCOEMERxSNEAYCBqg0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:91ffffffc3c3c3ff
Perceptual Hash:b5cb0d618f6928cb
Difference Hash:2a00020016961620
Wavelet Hash:80fefefe0202021e
Color Hash:#87c5a9

Other Hashes

Crop Resistant:2a00020016961620

Scan History

Scan history not available

Unable to load historical scan data