Security Scan Report: ftp.jmacsafety.com

Redirected to:
https://ftp.jmacsafety.com/cgi-sys/suspendedpage.cgi
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 6 HTTP transactions. The main domain is jmacsafety.com and was registered 1 month ago.

Submitted URL: https://ftp.jmacsafety.com

Effective URL:
https://ftp.jmacsafety.com/cgi-sys/suspendedpage.cgi
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Suspended hosting placeholder on a 54-day-old domain that a single unverified threat-intel source tags as Agent Tesla malware. No live content or forms, but the domain has been flagged for malware distribution — avoid.

Risk Factors (3)
Threat-intel match naming the primary domain as Agent Tesla malware infrastructure (single source, unverified)
Recently registered, unranked domain currently suspended by its hosting provider
Subdomain pattern (ftp.) consistent with file-staging hosts used to distribute malware payloads
Domain age information unavailable

Details

Page Title

Account Suspended

Scan Type

public

Domain Name Analysis

The domain 'ftp.jmacsafety.com' uses the commercial generic top-level domain (.com), featuring subdomain 'ftp'. Its registrable label 'jmacsafety' stretches across 10 characters holding three vowels versus 7 consonants. Segmentation suggests 3 words: j, mac, safety. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

This Account has been pended. Contact your hosting provider for more information. Status: 403 Forbidden Content-Type: text/plain; charset=utf-8 403 Forbidden Executing in an invalid environment for...

Page Load Overview

2.02s
Total Load Time
55 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:255 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical43% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
43%
adult content
41%
technology software
40%
cryptocurrency blockchain
33%
phishing scam
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2218.208.91.209Kuala Lumpur, Kuala Lumpur, Malaysia
AS4788TM TECHNOLOGY SERVICES SDN. BHD.
2172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
63--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E0F1E9A72AE3000B744712E87ABE2206AB59A513D11ACD607F0DF6E9CF87980CC5376D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:elVZHCkA26xd3Q4JRveuTtMy47R/Ga0kVhFuPwf8Pn9wHHyJIZg:KJvVGaRF8I8og

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7743:QJEEBK4I0hZBg0MMZGsAjpkSA0fYAkYQwGmA3wDgBwigAFIDgQaKoA1AF0AiMoGAkADcLMYQEAAiAB7cXVUJqgTXGMiUABhg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000ffffffffff
Perceptual Hash:ef678786989c3c18
Difference Hash:7848003800000000
Wavelet Hash:0700000f0f0f0f0f
Color Hash:06007000000

Scan History

Scan history not available

Unable to load historical scan data