Security Review

Is an1.co.in legit or a scam?

Our verdict:Suspicious· 38/100

AN1 is an unofficial Android app repository distributing modified 'MOD' APKs that are frequently flagged for containing hidden malware or adware.

an1.co.inScanned 1h ago
0
Trust score
SUSPICIOUS
Score breakdown
Heuristics 35·MT 40
Category tags
fake-apk#cracked app#malware85% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
6 years old
Registered Apr 19, 2020
MT Intelligence
Suspicious
High likelihood · 85% confidence
SUSPICIOUS

Possible malware risk

AN1 is an unofficial Android app repository distributing modified 'MOD' APKs that are frequently flagged for containing hidden malware or adware. Some signals suggest this page may deliver unwanted software. Don't download any files or install any browser extensions from here.

Website Preview

Screenshot of an1.co.in
LIVE RENDER
an1.co.in

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

75
/ 100
Critical visual risk

Visual red flags detected in the screenshot

The site functions as an unofficial app repository promoting modified (MOD) APKs with 'unlimited' currency, a common vector for distributing potentially unwanted programs or malware.

Visual risk75/100

What our vision model saw

5 signals

Promotes 'MOD APK' versions of popular games, which typically indicate cracked or modified software.

Promises 'Unlimited Coins' and 'Unlimited Money' as features for mobile applications.

Generic 'Install' buttons on a third-party site rather than linking to official app stores.

Uses the branding 'AN1' which is associated with unofficial Android application distribution.

Layout mimics a legitimate app store to gain user trust for downloading unofficial files.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The platform operates by offering 'cracked' versions of popular mobile games with features like unlimited money, which is a classic lure for distributing malicious software. Our intelligence stack identifies the site's structure as a known template for unofficial APK distribution. While the domain has existed for over six years, user reports on community forums like Reddit specifically link downloads from this site to phone infections and account hijacking. The lack of any verifiable business registration or contact information further reduces its credibility. Because these files are modified by unknown third parties, they bypass official security checks found in legitimate app stores.
Full dossier
Analysis complete

Page Content

The site mimics a legitimate app store layout, categorizing hundreds of games and apps. It heavily promotes 'MOD APK' versions, explicitly promising 'Unlimited Coins' and 'Unlimited Money' to entice users into downloading unofficial files.

Infrastructure

The site is hosted behind a common content delivery network, which masks the true server location. It loads external scripts from various third-party domains, including Russian analytics and unknown ad-delivery networks, which is typical for high-risk download sites.

Domain History

The domain was registered in April 2020 via GoDaddy. While its age suggests it is not a 'throwaway' site, long-term operation is common for APK repositories that generate revenue through aggressive advertising and potentially unwanted software bundles.

Web Reputation

Independent review aggregators show a divided reputation. While some users claim successful downloads, others have reported severe security breaches, including malware infections that led to attempted account takeovers. The site lacks any official business presence or transparency.
Risk Factors
6
  • Distributes modified (MOD) APK files which are a primary vector for mobile malware.
  • Confirmed user reports of phone infections and account hacking attempts.
  • Promotes 'unlimited' currency hacks, a common deceptive lure.
  • No verifiable business registration or physical address provided.
  • Uses aggressive third-party scripts and unknown ad networks.
  • Lacks a direct contact email or official support channel.
Positive Signals
3
  • Domain has been active for over six years.
  • Valid SSL certificate issued by a recognized provider.
  • Currently clean according to our antivirus network's automated scans.
AI Recommendation
Do not download or install any APK files from this site. Stick to official app stores like the Google Play Store to ensure your device and personal accounts remain secure.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for an1.co.in, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
6.2 yrs
Registered Apr 2020
Business registration
Not found · Pakistan
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 1 positive
Key findings
7 headline facts from open-web research
  • Domain an1.co.in created April 19, 2020 (approx. 6 years old per user message 2266 days); registrar GoDaddy.com, LLC; nameservers Cloudflare.
  • WHOIS: Registrant organization A&S, country Pakistan (PK), privacy protected; SSL valid since 2020 issued by Google Trust Services.
  • Site hosts modded/cracked Android APK downloads; page title/description match 'AN1 - Download Free Android Modded Games & Apps Apk'.
  • VirusTotal scans on subdomains (dl.an1.co.in, data.an1.co.in) show no detections from listed engines; clean on blocklists.
  • User reports on Reddit include one claiming phone infection and account hacks after download; another notes possible adware risk from modded APKs.
  • Scam Detector gives 50.6/100 medium trust score, flags as 'questionable' with proximity to suspicious sites and risk factors.
  • Related an1.com has mixed reviews (Trustpilot positive, WOT 52% with complaints of popups/viruses/fake downloads); no dedicated Trustpilot/ScamAdviser for .co.in.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Reddit (r/ApksApps)open

    "DO NOT install anything from that site . it infected my phone and they tried to hack every one of my accounts. Stay away!"

  • Scam Detectoropen

    "Is an1.co.in legit? It's definitely questionable. If you plan to do business on this site, proceed with caution as it received a medium score on our chart."

Positive reviews (1)
Quotes indicating the site is legitimate.
  • Trustpilot (an1.com)open

    "Rated 5 out of 5 stars. This website is good for download an apk, I even download Minecraft on An1 .com and the website is very safe for download ... An1 .com and ..."

Business registration
Status: not found · Pakistan

WHOIS shows registrant organization A&S, address/state Pak, country PK; privacy redacted; no public business registration details found.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
We identified several concerning reports on Reddit where users claimed that installing files from an1.co.in led to device infections and attempts to hack their personal accounts. Independent trust aggregators give the site a 'medium' or 'questionable' score, noting its role in distributing unofficial software. While some positive feedback exists for the related .com domain, the .co.in version is frequently associated with adware and security risks in technical communities.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Cracked / modded APK download template detected.
Linked signals (1)
Template · Fake APK

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Technical checks

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers2026.05.26
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No postal address visible on the page.
  • Scam family match: Cracked APK / Modded App.
  • Phone number listed (2026.05.26).

Domain & Encryption

Domain History
Age6 years old
RegistrarGoDaddy
RegisteredApr 19, 2020
ExpiresApr 19, 2027
Owner privacyHidden
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 3, 2026 (61d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
Platform / CMSWordPress

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://an1.co.in/
  • 2200https://an1.co.in/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Malware
Malware
Moderate likelihood
55/100
  • Fake-app / APK download pattern detected.
  • AI analyst tagged this as malware / drive-by / cracked app.
  • Primary scraped category: fake mobile app / APK.

Possible malware risk

Signals suggest this page may deliver malicious files or exploit the browser.

  • Treat an1.co.in as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • If you downloaded or ran a file from here

    Disconnect the device from the internet, run a full scan with a reputable antivirus (Malwarebytes, ESET, Bitdefender), and consider a second-opinion scanner. Change passwords on any account you used from the device afterwards — ideally from a different device.

  • Get free cleanup help

    MalwareTips has a dedicated malware-removal team who walk you through cleanup one-on-one.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked an1.co.in as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • an1.co.in currently scores 38/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. an1.co.in presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 61 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • an1.co.in is 6.2 years old, registered on 4/19/2020 through GoDaddy. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report an1.co.in as clean.
  • No. an1.co.in is not currently listed on the major browser blocklist feeds that modern browsers use.
  • an1.co.in resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on July 4, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around an1.co.in have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·an1.co.in
SUSPICIOUS

This site is an unofficial repository for modified (MOD) Android applications that promise unlimited in-game currency. While the domain is established, downloading cracked software from third-party sources carries a high risk of malware infection. You should avoid downloading files from this platform.

Do not download or install any APK files from this site. Stick to official app stores like the Google Play Store to ensure your device and personal accounts remain secure.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.