troika.net.in - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned troika.net.in and returned a unknown verdict (score 0). The page resolved to 162.214.207.88 on Unified Layer in US. The domain was registered 450 days ago through National Internet Exchange of India. 16 domains and 1 IP were contacted, over 46 HTTP requests. 5 malware samples communicate with this URL. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://troika.net.in/ - Domain: troika.net.in · IP: 162.214.207.88 · AS46606 · US
- Server: nginx
- Page title: AI Agents Company | Mumbai | Top | Best
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: National Internet Exchange of India · domain age 450 days · created 2025-05-28
- Registrant country: IN
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 6 08: · subject CN=troika.net.in
- Evidenced operator: National Internet Exchange of India
- HTTP requests captured: 46
- Scan tier: fast · observed 2026-08-22 01:03:34 UTC
Malware communicating with this URL (5)
These samples were observed contacting or being served from troika.net.in. Each links to its full analysis.
- cf4ba14320ccc77b04049e7432379a88cd452680abf80b2d338839a4e3377e6b - referenced ·
cf4ba14320ccc77b04049e7432379a88· first seen 2026-08-22 - 9451818cc046f7d4415b7df5047d335aa52ad8827454f78d1248485a8370bda4 - referenced ·
9451818cc046f7d4415b7df5047d335a· first seen 2026-08-15 - b0202cb499da6b5f4668cdc862d066072944b6ad6f1a3ed714394785b8db81f9 - referenced ·
b0202cb499da6b5f4668cdc862d06607· first seen 2026-08-15 - 72f12ef73b8a9fcbe11e5b355df0472b34a7797729ba92724f2052f8ca464a87 - referenced ·
72f12ef73b8a9fcbe11e5b355df0472b· first seen 2026-08-14 - 0bdd38660ef583736dc88fd73e2992762924b85a50ca25968a578b9bc921c8e5 - referenced ·
0bdd38660ef583736dc88fd73e299276· first seen 2026-08-14
Antivirus & YARA (1 of 48 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- Nginx
- WordPress
- Google Analytics
- jQuery
- Bootstrap
Contacted infrastructure
- 162.214.207.88 - AS46606 Unified Layer (United States)
Observed indicators
- troika.net.in
- gmpg.org
- fonts.googleapis.com
- analytics.ahrefs.com
- www.googletagmanager.com
- x.com
- www.linkedin.com
- www.instagram.com
- www.facebook.com
- supaagent.net
- theprint.in
- www.mid-day.com
- www.business-standard.com
- news.abplive.com
- www.aninews.in
- www.troikatechservices.in
- 162.214.207.88
- https://troika.net.in/
- https://gmpg.org/xfn/11
- https://fonts.googleapis.com/
Other scans of troika.net.in (4)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 14 Aug 2026 - unknown
Questions about troika.net.in
- Is troika.net.in safe?
- The scan of troika.net.in on 22 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with troika.net.in?
- 5 analysed samples communicate with this URL.
- How was troika.net.in checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of troika.net.in
Scanned on MalwareAnalyzer by Cyble · Open interactive scan