ScanMalware.com

Security Scan Report: news18marathi.com

Redirected to:
https://news18marathi.com/videos/maharashtra/police-detain-dhruv-rathe...
Site favicon
Submitted: Oct 10, 2026, 6:02:47 AMCompleted: Oct 10, 2026, 6:04:25 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b6b935a1-c4ce-4ef8-a6c4-fa1842a65fd5Domain and IP registration (RDAP)/api/v1/rdap/b6b935a1-c4ce-4ef8-a6c4-fa1842a65fd5Certificate Transparency/api/v1/ct/news18marathi.comHow often this domain was scanned/api/v1/domain/stats/news18marathi.comScan history for this domain/api/v1/domain/history/news18marathi.com?limit=15
This website contacted 80 IPs in 8 countries across 89 domains to perform 627 HTTP transactions. The main domain is news18marathi.com and was registered 1 year 8 months ago.

Submitted URL: https://news18marathi.com/videos/maharashtra/youtuber-dhruv-rathee-detained-cjp-delhi-cjp-protest-1802137.html

Effective URL:

https://news18marathi.com/videos/maharashtra/police-detain-dhruv-rathe...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Legitimate 13-year-old Marathi news site, but the page loads resources from 3 multi-source-corroborated macOS-malware-flagged domains, indicating a likely malvertising/injection compromise. No forms or impersonation.

Risk Factors (2)
Page loads resources from 3 domains independently flagged as macOS malware ('osx fluttershell') by two corroborating threat-intel feeds each — consistent with malicious ad/script injection on an otherwise legitimate news site
Possible malvertising compromise delivering macOS-targeted malware to visitors
Safety Factors (6)
13-year-old established domain (registered 2012) with minimal age risk
Self-branding detected: title/meta match the domain; no impersonation of another entity
No credential, password, or payment collection forms
Content is ordinary news-journalism (ML category: news media journalism, 72%)
No JavaScript YARA malware, no credential exfiltration, no cross-origin credential forms
Established domain (5051 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Youtuber Dhruv Rathee Detained | CJP आंदोलनाआधी ध्रुव राठी पोलिसांच्या ताब्यात | Delhi CJP Protest | - News18 Marathi

Scan Type

public

Domain Name Analysis

The domain name 'news18marathi.com' uses the commercial generic top-level domain (.com). The core label 'news18marathi' covers 13 characters split between 4 vowels and 7 consonants, plus 2 digits. Segmentation suggests 3 words: news, 18, marathi. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://news18marathi.com/videos/maharashtra/youtuber-dhruv-rathee-detained-cjp-delhi-cjp-protest-1802137.html

Page Load Overview

1.66s
Total Load Time
57.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:mr
Text Length:74,788 chars
Detector Agreement:80%
Language mismatch: Declared as mr but detected as en

Website Classification

Primary Category

news media journalism72% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
72%
entertainment media
67%
government public service
38%
gambling betting
31%
finance banking
27%

Detected Features

OG: video
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7423.44.168.42Akamai · CDNPrague, Prague, Czech Republic
AS20940Akamai International B.V.
723.194.190.162Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
718.245.63.132Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
718.244.18.122Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.14.113Google · CDNUnited States
AS15169Google LLC
723.36.162.206Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
720.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
7142.251.110.97Google · CDNUnited States
AS15169Google LLC
723.197.134.232Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
734.200.195.43Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
62780--

Detected Technologies9

Open-Graph-Protocolvvideo
100%
Google-AnalyticsvUniversal
100%
HTTP/3
40%
HSTS
40%
Envoy
40%
Taboola
20%
Izooto
20%
Funding Choices
20%
Amazon Advertising
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13C353B32F640352F9B3F5AC467499F3AB0E6A13BE1D64050F6DD471887DADB8212E287

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:66/yIOzC6MJ5G9X1oeVFBLQsCIweVTSwjS:68yIOFHSWS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1097848:UIGQAwghjCIQCoESFhmRKJdYJCwCitkI0RKAMJgQVSHwoDBDwBoWHAEqxk25QEAtBECJwDoVGKAKIVoAwlkFgBRGRSx3WlEu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00193d9d9d998101
Perceptual Hash:9c96633c9c3ccd83
Difference Hash:0b33333333333b13
Wavelet Hash:81197f9f9f998181
Color Hash:#6640bf

Other Hashes

Crop Resistant:b3b7b4b6b4b4b4b3,8e8ebeaeb2ae3396,2b33b23232333b03

Scan History

Scan history not available

Unable to load historical scan data