Security Scan Report: jfindia.in

Redirected to:
https://www.jfindia.in/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 10 domains to perform 32 HTTP transactions. The main domain is jfindia.in and was registered 9 years ago.

Submitted URL: https://jfindia.in

Effective URL:
https://www.jfindia.in/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised/weaponized site injecting a ClickFix 'Human Verification' overlay (Win+X -> Terminal paste) with CRITICAL YARA and IDS malware hits and multi-source malware Indicators of Compromise. Do not interact.

Risk Factors (7)
Known malicious kit injected: Windows ClickFix Win+X overlay (analyst-vetted roster match)
CRITICAL YARA malware rule match (ClickFix_WinX_Overlay_Kit)
Primary domain flagged as malware ('clearfake') by two independent threat feeds
CRITICAL IDS alert ET MALWARE EtherHiding Exfil M2
Fake Cloudflare-style verification overlay impersonating a security brand
Blockchain RPC / EtherHiding style C2 exfiltration traffic
Page offers paid YouTube view-boosting packages, a grey-market service
Domain age information unavailable

Details

Page Title

JF india – Event Management Company

Scan Type

public

Domain Name Analysis

Within the Indian country-code top-level domain (.in), 'jfindia.in' is registered without a subdomain. Count 7 characters in 'jfindia' with three vowels and 4 consonants. It segments into three words: j, f, india. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jfindia.in

Page Load Overview

3.62s
Total Load Time
822 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,772 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business59% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
59%
entertainment media
37%
social media network
28%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10103.21.58.195Mumbai, Maharashtra, India
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
23.109.250.6Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
218.245.86.52Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
23.7.200.86Aws · CLOUDMumbai, Maharashtra, India
AS16509Amazon.com, Inc.
218.245.86.73Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.245.86.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1794308B3C39419FB360A86FE8150F306A5B2D21ACE0A23D578F4E167E66CEF51532719

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2syp9x5E6GrkpX/pk0zwEqJ/o+iZjGRtPNppY3oZe0D:29Lx5F3VUopZjGjt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56483:AINIqRCAAICeaYyAKQVbkFEQASCv0BKUiYGoN0JxAAHYBMASAAYqIHwVShBWQALmQwJQkEzO0AkMARYpMEAg/VUYYFEI9Gaj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000ecffffff
Perceptual Hash:e445a99892c4a7ef
Difference Hash:26724684c938a606
Wavelet Hash:ff00000000ffffff
Color Hash:#cae06c

Other Hashes

Crop Resistant:26724684c938a606

Scan History

Scan history not available

Unable to load historical scan data