Security Scan: 403 Forbidden

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5f5784f5-7af3-4743-a07d-3790bd1725c1 Domain and IP registration (RDAP)/api/v1/rdap/5f5784f5-7af3-4743-a07d-3790bd1725c1How often this domain was scanned/api/v1/domain/stats/kjpnasdom.rs Scan history for this domain/api/v1/domain/history/kjpnasdom.rs?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 55 HTTP transactions. The main domain is kjpnasdom.rs and was registered 13 years ago.

Submitted URL: https://kjpnasdom.rs/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised site serving a ClickFix fake-Cloudflare 'verify you are human' lure that copies a PowerShell command to the clipboard and tells victims to paste and run it via Win+X — confirmed malware delivery.

Risk Factors (6)

ClickFix-style social-engineering overlay: fake Cloudflare bot verification demanding Win+X → Terminal → paste

Malicious PowerShell/shell command staged on the user's clipboard (pastejacking / clipboard_shell_injection)

Fake Cloudflare branding and fabricated Ray ID used to lend credibility to the lure

ET MALWARE EtherHiding Exfil M2 network alerts repeated 19 times

Seven cross-domain redirects leading to this page; page returns 403 Forbidden while still serving the lure

Compromised-looking established site (13 years old) now serving a malware kit — consistent with an injected script on a hijacked host

Domain age information unavailable

Details

Page Title

403 Forbiddenother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'kjpnasdom.rs' on the Serbian country-code top-level domain (.rs) and has no subdomain. The core label 'kjpnasdom' covers 9 characters split between two vowels and seven consonants. Word splitting yields four words: k, jpn, as, dom. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.54s

Total Load Time

147 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,058 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

77%

documentation technical

65%

phishing scam

37%

government public service

36%

adult content

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	77.88.21.119Yandex · CLOUD	Moscow, Moscow, Russia	AS13238YANDEX LLC
6	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
55	9	-	-