Security Scan Report: jdnsquare.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 7 domains to perform 31 HTTP transactions. The main domain is jdnsquare.com and was registered 12 years ago.

Submitted URL: https://jdnsquare.com

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Legitimate-looking JDN Square property page whose HTML has been compromised with an analyst-vetted IClickFix EtherHiding loader and flagged RPC hosts, confirmed by CRITICAL malware IDS alerts. Do not browse; avoid clicking.

Risk Factors (6)
Injected IClickFix ClickFix/EtherHiding malware loader in the page HTML (analyst-vetted kit roster)
Obfuscated JavaScript decrypting a payload via atob/constructor.constructor with blockchain-hosted next stage
Obfuscated script references to flagged RPC/relay infrastructure (0xrpc.io, 1rpc.io, gateway.tenderly.co)
CRITICAL IDS alerts for EtherHiding exfiltration
Third-party domain zvh3.com loaded by the page is reported malicious by three independent feeds
Primary domain reported as malware (stealer) by a single unverified community source
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'jdnsquare.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'jdnsquare' is 9 characters long containing 3 vowels alongside six consonants. It segments into 2 words: jdn, square. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

[ Published June 6, 2025| By JCC Welcome to JDN Square — Your Premier Residential & Business Hub in Mandaue Live. Work. Thrive. All in one sophisticated address. ? Prime Location in Banilad, Mandaue...

Page Load Overview

13.70s
Total Load Time
282 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,866 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(98%)🇩🇪de(2%)

Website Classification

Primary Category

real estate property54% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
54%
healthcare medical
30%
corporate business
29%
adult content
29%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16192.232.249.159Phoenix, Arizona, United States
AS31898Oracle Corporation
10192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1172.67.175.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
318--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15CD3C5A7F2C454EF653F8929429DB37CFD2CA140DB0A3A95B0E9B3344B8E9EB045161D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:R5kxG34sypPwqRLUYXaldlMlWlBaXD2JOnxn+PZMfGVobhODGrXYsDjA9eIIcV8Q:R5k0I9SM3rDjA9lqO46ggCCh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:135689:iEwYCFaChhjLrpmRw6EQIWECY8EQwxBNAvArpYMVABMNBI3oARoBLAIA6JBWCgAsQiYKGSRvADAZABAsAA0z9l0TL4/DIUrC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:38003c3c3c3c3c3c
Perceptual Hash:9a652ccccbce89e4
Difference Hash:7169696969696979
Wavelet Hash:3d003c3c3c3d3d3d
Color Hash:03007000000

Scan History

Scan history not available

Unable to load historical scan data