ScanMalware.com

Security Scan Report: jointheladders.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/05458d9b-6ef9-41c5-9b5d-07aaeb043973Domain and IP registration (RDAP)/api/v1/rdap/05458d9b-6ef9-41c5-9b5d-07aaeb043973How often this domain was scanned/api/v1/domain/stats/jointheladders.xyzScan history for this domain/api/v1/domain/history/jointheladders.xyz?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 12 HTTP transactions. The main domain is jointheladders.xyz and was registered 3 weeks ago.

Submitted URL: https://jointheladders.xyz/

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Page claims to be 'The Ladders' hiring but runs on the non-official jointheladders.xyz; combined with a HIGH IDS PowerShell-stager alert, treat as brand impersonation and avoid submitting any personal data.

Risk Factors (4)
Brand impersonation: uses 'The Ladders' brand identity on a non-official .xyz domain
HIGH-severity IDS alert indicating a possible PowerShell stager / attack-response payload
Unranked, unknown-age domain on a TLD associated with abuse
Job-listing lure format typical of recruitment/brand-abuse funnels
Domain age information unavailable

Details

Page Title

Head of Marketing | The Ladders

Scan Type

public

Domain Name Analysis

The domain 'jointheladders.xyz' uses the open generic top-level domain (.xyz) without a subdomain. The second-level label 'jointheladders' is 14 characters long split between 5 vowels and 9 consonants. Tokenizing the label suggests 3 words: join, the, ladders. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jointheladders.xyz/

Page Load Overview

1.44s
Total Load Time
279 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,569 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business94% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
94%
adult content
90%
government public service
89%
phishing scam
86%
social media network
83%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4208.84.100.64United States
AS22295Advin Services LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
123--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T109D17112F2F02467024395D6AEE13F28ED924917C7991541F6FC879C1FA5EAAC9A320E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ncN600Lc6s/KdEBsFrEou7tLs4mHpGGwyGRr:cN606c6dlFrEooLs4mH/wVZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6472:WBJiIDLIECGITQhAFYsQICEpktEQCiWQAAIiAtAAAKGYEEiiA+CpCAAAcACHQITFMYEPEodAAqkITUBkEAVjkIkQoSIWIGED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3ededfffcf081000
Perceptual Hash:9c9247c7936d9338
Difference Hash:c8b0b0949c12324d
Wavelet Hash:3ededfcf8d2c1000
Color Hash:N/A

Other Hashes

Crop Resistant:c8b0b0949c12324d

Scan History

Scan history not available

Unable to load historical scan data