Security Scan Report: bjfox2005.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is bjfox2005.com and was registered 3 months ago.

Submitted URL: https://bjfox2005.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unranked 77-day-old domain impersonating ScreenConnect, with its primary domain flagged as RAT malware by two independent threat-intel feeds. Do not download or connect to any session.

Risk Factors (3)
Multi-source threat-intelligence match for RAT malware on the page's own primary domain
Impersonation of the ScreenConnect remote-support brand on an unrelated, unranked 77-day-old domain
Remote-support portal theme is a known delivery vector for RAT/tech-support-fraud installers
Domain age information unavailable

Details

Page Title

ScreenConnect Remote Support Software

Scan Type

public

Domain Name Analysis

The domain 'bjfox2005.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'bjfox2005' spans 9 characters containing 1 vowel alongside 4 consonants; it also includes 4 digits. Tokenizing the label suggests three words: bj, fox, 2005. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

& ScreenConnect Losin Welcome No sessions are currently publicly listed Welcome to our online remote _ or have invitation codes. You may have support and collaboration portal an invitation in your...

Page Load Overview

5.29s
Total Load Time
293 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:439 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service29% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
29%
news media journalism
26%
documentation technical
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13199.245.176.138Ogden, Utah, United States
AS213186Yanoor Islam Khan
131--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18993E7C1F3EE1877017A6018DD5E10CD6BBC52B264109863FC7CED8835E8D6DA276BA9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4AVgxNl6+pXl7i8Q7KRGeJ5k2Qg5JHV6ICWdQipPvb7bkyXccoqVtIB9:4AVgxf6+BlaeJ5kZgv1qkccrk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:91308:QGQChKJYQhFICGpgaKQgJ7FGQvGJBclZBAbgAAJGqQughGFoQosuOFA6NpAkAGSDEIHA1emwCYDoBAIAqIzu0ADUiFMIQExh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c2ffe7e380007020
Perceptual Hash:e4b74c193f613346
Difference Hash:16248c8e2698e2e7
Wavelet Hash:c2ffe7e3d7007020
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data