Security Scan Report: jk-products.co.za

Redirected to:
https://www.jk-products.co.za/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 4 domains to perform 85 HTTP transactions. The main domain is jk-products.co.za and was registered 29 years ago.

Submitted URL: https://jk-products.co.za

Effective URL:
https://www.jk-products.co.za/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established jk-products.co.za is compromised: ClearFake EtherHiding loader (roster + YARA confirmed) and a fetch to flagged host correspondabb.com, with injected spam content. Classic compromised-site malware delivery.

Risk Factors (5)
ClearFake blockchain-contract loader (EtherHiding) injected into the page
Primary domain corroborated as malware ('clearfake') by two independent threat feeds
Cross-origin fetch to correspondabb.com, itself multi-source flagged as a malicious host
Injected off-topic SEO/pharma spam content and external link not belonging to the site's own brand
Three informational Suricata obfuscated-JavaScript hunting alerts consistent with an injected loader
Domain age information unavailable

Details

Page Title

JK Products – Under Construction

Scan Type

public

Domain Name Analysis

The domain name 'jk-products.co.za' uses the South African country-code top-level domain (.co.za) without a subdomain. The second-level label 'jk-products' is 11 characters long holding two vowels versus eight consonants; bonus characters include one hyphen. It segments into two words: jk, products. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jk-products.co.za

Page Load Overview

7.04s
Total Load Time
420 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-ZA
Text Length:296 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network100% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
100%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29102.216.79.203Cape Town, Western Cape, South Africa
AS328266Atomic (Pty) Ltd
28142.251.110.95Google · CDNUnited States
AS15169Google LLC
28172.67.218.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
853--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D8C309B3F1B84066752B87F89438B76CFA24F481D74267A4FCADB048A3D46E7215670E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:WvEfDqzd0ArhAlASfAsXAR5o6LN2B9Yb/Hh6pcXACWkFB4fyLIlW8yLE9u8f1JYg:8MqzPGOR1GB9Q/B6pcXACWkz4aLIlKo/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:127304:7auRBUAAYIRAAJoEYIB2o4vEbAgMoorAAjKPEgIAlEgdAADwcWZ9kDAhQgKAYGA44oq5MiwVENtXgw9QCIEIgRCkDZAAxVcT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9fffffc3c3ffffe7
Perceptual Hash:b61c9c3c369c9c36
Difference Hash:3010200c0c200008
Wavelet Hash:0f2f0707c0f0f0e0
Color Hash:#7940bf

Other Hashes

Crop Resistant:3010200c0c200008

Scan History

Scan history not available

Unable to load historical scan data