ScanMalware.com

Security Scan Report: atlabshoponline.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7974a139-85de-4a5f-bd9a-2dc57532b7d4Domain and IP registration (RDAP)/api/v1/rdap/7974a139-85de-4a5f-bd9a-2dc57532b7d4How often this domain was scanned/api/v1/domain/stats/atlabshoponline.comScan history for this domain/api/v1/domain/history/atlabshoponline.com?limit=15
This website contacted 25 IPs in 3 countries across 24 domains to perform 300 HTTP transactions. The main domain is atlabshoponline.com and was registered 10 years ago.

Submitted URL: https://atlabshoponline.com/uae/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate-looking Magento education store whose pages carry injected DeepVein CMS-block/Keitaro loaders (two critical YARA hits, roster-confirmed); treat the site as compromised and do not browse or shop here.

Risk Factors (4)
Hidden injected JavaScript matching a known malicious Magento CMS-block loader (DeepVein) on the store's pages
Keitaro traffic-distribution-system loader with its tracker URL obfuscated via atob()
Malicious payload persisted in browser storage and re-executed on subsequent page views
Store content blocks modified outside normal store administration (indicative of site compromise)
Domain age information unavailable

Details

Page Title

K12 & STEAM Education Kit Online in Dubai, UAE - Atlab Shoponline

Scan Type

public

Domain Name Analysis

Domain 'atlabshoponline.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'atlabshoponline' is 15 characters long holding 6 vowels versus 9 consonants. Splitting it apart reveals four words: at, lab, shop, online. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://atlabshoponline.com/uae/

Page Load Overview

21.67s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12,520 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning83% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
83%
e-commerce shopping
72%
technology software
69%
documentation technical
37%
corporate
35%

Detected Features

Login Form
Search
Articles
Products
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.67.74.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.26.14.109Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.26.15.109Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12142.251.110.97Google · CDNUnited States
AS15169Google LLC
12103.224.182.215San Diego, California, United States
AS133618Trellian Pty. Limited
1223.194.190.166Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
12157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
12104.16.137.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1220.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
12142.251.151.119Google · CDNUnited States
AS15169Google LLC
30025--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11964A3B2D8F2143B816771C490A49B8E69D3F717C7828DC0F5DC43666FC9EA46A2B15C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:xu/SgTOgKvc0/GVonVDtVj6RTJILEe6R9YOmQpmImIWg9w7uns04niX4Hikw3gt7:Q+gH0/d6nIx6OImF2q2Goe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:320321:YCIEnVwB0AAgGiAKIAMRsQ0k0EBEOFOkBxMQHBoGOiAk+aAdgRQAhQIwZAAZoEcgKAIuuUpIkkVECCNZQBIAQCRGDEE2MEoL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data