Security Report: joyforce-tech.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/be219c2f-03a1-4f1b-a4b3-5a42f9b2a19a Domain and IP registration (RDAP)/api/v1/rdap/be219c2f-03a1-4f1b-a4b3-5a42f9b2a19aHow often this domain was scanned/api/v1/domain/stats/joyforce-tech.com Scan history for this domain/api/v1/domain/history/joyforce-tech.com?limit=15

This website contacted 9 IPs in 3 countries across 9 domains to perform 60 HTTP transactions. The main domain is joyforce-tech.com and was registered 12 years ago.

Submitted URL: https://joyforce-tech.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Established domain hijacked and now serving the ClearFake/ClickFix malware chain via an obfuscated Polygon contract loader, plus hidden iclickfix hosts and gambling SEO spam. Do not visit.

Risk Factors (8)

Analyst-vetted ClearFake phishing/malware kit injected into the page (CRITICAL YARA + roster anchor)

EtherHiding loader reading a server list from a Polygon smart contract via public RPC nodes

Rival-kit cleanup script that strips competing ClickFix overlays and blocks navigation up to 45 seconds

Obfuscated JavaScript concealing three threat-feed malware hosts (campaigntracker.icu/.run/.top)

Threat-intel reporting the primary domain as an 'unknown loader' malware host

Domain defacement banner ('Hacked by Trenggalek6etar') indicating the site is compromised

High-volume gambling/betting SEO spam injection with links to unrelated third-party domains

13 Suricata IDS alerts, including 7 HIGH-severity hits for suspicious *.icu domain traffic (HTTP POST, DNS query, TLS SNI)

Domain age information unavailable

Details

Page Title

Hacked by Trenggalek6etar – Hacked by Trenggalek6etar – JATIM4U

Scan Type

public

Favicon Hash

MMH3: -833407021

MD5: 3ad9d196f988815ef22ab45663c18e21

Domain Name Analysis

Domain 'joyforce-tech.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'joyforce-tech' covers 13 characters holding 4 vowels versus eight consonants; it also includes one hyphen. Word splitting yields 3 words: joy, force, tech. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.96s

Total Load Time

3.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,872 chars

Detector Agreement:67%

Website Classification

Primary Category

gambling betting91% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

91%

entertainment media

91%

healthcare medical

78%

cryptocurrency blockchain

77%

adult content

65%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	47.251.37.241	Santa Clara, California, United States	AS45102Alibaba (US) Technology Co., Ltd.
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
6	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
6	142.251.127.84Google · CDN	United States	AS15169Google LLC
6	13.33.52.208Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
6	192.178.170.95Google · CDN	United States	AS15169Google LLC
6	142.250.154.94Google · CDN	United States	AS15169Google LLC
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
60	9	-	-