ScanMalware.com

Security Scan Report: epiccircle.in

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7c82954e-9bbf-43ac-9e59-5ca162fa5230Domain and IP registration (RDAP)/api/v1/rdap/7c82954e-9bbf-43ac-9e59-5ca162fa5230How often this domain was scanned/api/v1/domain/stats/epiccircle.inScan history for this domain/api/v1/domain/history/epiccircle.in?limit=15
This website contacted 5 IPs in 2 countries across 4 domains to perform 51 HTTP transactions. The main domain is epiccircle.in and was registered 1 year 7 months ago.

Submitted URL: https://epiccircle.in

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking WordPress site is compromised and injects a ClickFix fake Cloudflare 'Human Verification' overlay plus an EtherHiding blockchain-staged loader that tricks Windows users into pasting terminal commands. Do not interact.

Risk Factors (5)
Compromised site serving a ClickFix / fake human-verification overlay that coerces visitors into executing attacker-supplied terminal commands
EtherHiding blockchain-based payload staging via Polygon RPC endpoints (polygon.drpc.org, polygon-public.nodies.app) to evade takedown
Critical IDS malware alerts (EtherHiding Exfil M2) triggered during the scan
Obfuscated third-party script from cloud-browse.codes flagged malicious by three independent threat feeds
Page text impersonates Cloudflare's security interstitial to manufacture urgency for command execution
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'epiccircle.in' on the Indian country-code top-level domain (.in) and has no subdomain. Count 10 characters in 'epiccircle' split between four vowels and 6 consonants. Tokenizing the label suggests 2 words: epic, circle. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://epiccircle.in

Page Load Overview

1.58s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,041 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism72% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

travel tourism
72%
corporate business
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11192.185.155.124Ashburn, Virginia, United States
AS31898Oracle Corporation
10104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
10172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
515--

Detected Technologies5

WordPressv7.0.7
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
Apache HTTP Server
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CAC319329354613A616B4BEDE064371C72AED503CF5A0E69B3E852D4C7CEEA315A7B0C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:b7vjypwvNOKxNX7YGBNBuLO+o163QgnincIgawlZsZo+kiS0DuofROo3mH:b7G2xkGzcdr6BkiVDPfAo34

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:118807:TD5gSEhiUCWmQ1GSxZsIgAJIAKCnZUTBMNAJEpBIjCiGaFaOVRZQiBKGnVgQBpYNQAIGAQkUIJl8g4GQhOLKBJOiJEszkQCF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03893c7c666c6c7
Difference Hash:1818163600000008
Wavelet Hash:1f0f03030f0fff00
Color Hash:#693a78

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data