jinx.
jinx.prod.cmsevo.com presents a minimal API landing page that antivirus engines flagged as malicious.
At a glance
Antivirus · registration · identity- 3 engines classified the URL as malicious and 0 as suspicious; 53 returned harmless, 36 returned undetected, and 0 returned no usable result.
- Operator identity: Missing. No independently verifiable operator identity
- The domain was registered Dec 16, 2024 and was 1.6 years old at scan time.
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The site presented a valid TLSv1.3 certificate at scan time.
Intelligence
The site loads a bare API-branded landing page titled Jinx API - Playin with no navigation, forms, or visible operator. Antivirus engines detected malicious content despite a clean Google Safe Browsing result and a valid TLS certificate.
Evidence Map
One or more reputation sources recorded a concern
No independently verifiable operator identity
Only partial behavior evidence was available
The domain was registered Dec 16, 2024 and was 1.6 years old at scan time.
- 13 antivirus engines flagged the URL as malicious
- 2Domain registered only 1.6 years ago with no observed privacy protection
- 3No operator identity or contact information visible on the page
- 1Valid TLSv1.3 certificate presented at scan time
- 2Hosting IP shows 0/100 abuse-confidence score
Observed visitor journey
The address resolves to a minimalist landing page that displays only the title Jinx API - Playin and the repeated phrase Playin Jinx API. No login form, countdown, or promotional copy appears, and the page contains zero contact fields.
Domain and registration details
The domain jinx.prod.cmsevo.com was registered on 16 December 2024 and is therefore 1.6 years old. Registration privacy protection was not observed in the record.
Security signals
Three antivirus engines flagged the URL as malicious while Google Safe Browsing returned no threat category. The site served a valid TLSv1.3 certificate, and the hosting IP carried an abuse-confidence score of 0/100.
Operator identity and page content
No independently verifiable operator identity, email address, phone number, postal address, or social link was present. The page archetype is recorded as an api service landing page, yet the visible content is limited to a single heading and lacks any functional navigation or documentation.
Website Preview
Screenshot capture was incomplete; HTML content corroborates a functional site.
- 1Minimalist landing page with no navigational elements or content
- 2Screenshot incomplete (slow render) — page HTML loaded normally, ignoring parked-domain heuristic.
Web Research
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 13 antivirus engines flagged the URL as malicious
- 2Domain registered only 1.6 years ago with no observed privacy protection
- 3No operator identity or contact information visible on the page
2 of 22 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Page body contains only 'Jinx API - Playin' with no further content, navigation, or functionality
- No emails, phones, addresses, or social links present
- No login forms, countdowns, or interactive elements detected
- ADMINUSLabs, BitDefender, and G-Data flagged the URL as malicious
- No direct evidence of binary distribution or exploit code in the supplied record
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 8:03 PM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 1.6 years old
- Registered
- Dec 16, 2024
- Registrar
- Cloudflare, Inc.
- Expires
- Dec 16, 2026
- WHOIS updated
- Nov 15, 2025
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Let's Encrypt · E7
- Certificate subject
- jinx.prod.cmsevo.com
- Certificate valid from
- Apr 22, 2026
- Certificate valid to
- Jul 21, 2026
- Network address
- 49.13.7.68
- ASN
- Unavailable
- Hosting organization
- Hetzner Online GmbH
- Country
- DE
- Server
- nginx/1.24.0 (Ubuntu)
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- jinx.prod.cmsevo.com
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Unavailable
- Extracted links
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 0
What to do
Do not visit or interact with jinx.prod.cmsevo.com; treat the address as a confirmed malware-delivery risk.
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
Final Verdict
Why this verdict
The verdict is malicious because 3 antivirus engines classified the URL as malicious, the domain was registered only 1.6 years ago, and the page shows no operator identity or contact details.
Do not visit or interact with jinx.prod.cmsevo.com; treat the address as a confirmed malware-delivery risk.
Key evidence
- 13 antivirus engines flagged the URL as malicious
- 2Domain registered only 1.6 years ago with no observed privacy protection
- 3No operator identity or contact information visible on the page
Safety FAQ
Is jinx.prod.cmsevo.com safe to use?+
The verdict is malicious because 3 antivirus engines classified the URL as malicious, the domain was registered only 1.6 years ago, and the page shows no operator identity or contact details.
What should I do about jinx.prod.cmsevo.com?+
Do not visit or interact with jinx.prod.cmsevo.com; treat the address as a confirmed malware-delivery risk.
How old is jinx.prod.cmsevo.com?+
jinx.prod.cmsevo.com is 1.6 years old and was registered dec 16, 2024.
What if I already interacted with jinx.prod.cmsevo.com?+
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 8:03 PM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.