ScanMalware.com

Security Scan Report: pixelground.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/27b56a4b-389d-4248-885d-2edf1e940c38Domain and IP registration (RDAP)/api/v1/rdap/27b56a4b-389d-4248-885d-2edf1e940c38How often this domain was scanned/api/v1/domain/stats/pixelground.xyzScan history for this domain/api/v1/domain/history/pixelground.xyz?limit=15
This website contacted 5 IPs in 1 country across 3 domains to perform 21 HTTP transactions. The main domain is pixelground.xyz and was registered 1 week ago.

Submitted URL: https://pixelground.xyz/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Analyst-vetted ClickFix/OverLord stealer recruitment kit confirmed by hunting rule and a HIGH PowerShell-stager IDS alert; avoid the form and any referral-code or clipboard commands.

Risk Factors (5)
Known malicious recruitment/ClickFix stealer kit identified by analyst-vetted roster and high-precision hunting rule
HIGH-severity IDS alert for PowerShell NoProfile stager traffic
Newly registered domain (12 days) hosting a fake recruitment/access-gate funnel
Access-request data collection (work email, organization) used as the entry step of the ClickFix chain
Unranked domain presenting an elaborate 'project' narrative typical of the overlord-recruitment-refcode-clickfix campaign
Domain age information unavailable

Details

Page Title

pixelGround Subnet

Scan Type

public

Domain Name Analysis

You're looking at domain 'pixelground.xyz' on the open generic top-level domain (.xyz) without a subdomain. The core label 'pixelground' covers 11 characters holding four vowels versus seven consonants. It segments into two words: pixel, ground. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pixelground.xyz/

Page Load Overview

2.95s
Total Load Time
538 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,059 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical25% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5170.205.28.251Miami, Florida, United States
AS22295Advin Services LLC
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
215--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16633D8A1C1F0723B502382E9DA276BA57ADA815FDB590310B7AE47F16F97CD6F913008

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Gy9HzOhpQtnvsUjNUceeR7G53/ZSc6q6xhS:j9HzapQBpReHF/ZSc6q6xhS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52127:AQAi0MIBGCwSkgoIC0jpA9FBCHEBgNgrMLhRc8EAoVBQqgUBAcIBIW2MMYgM7ABmGRAKpIIKCxEBRKCFATB+LSAVEhYQ0kel

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff9fd1f1b1ffff
Perceptual Hash:ec1a936d6d122e99
Difference Hash:613c272727279229
Wavelet Hash:00df91818191fbff
Color Hash:N/A

Other Hashes

Crop Resistant:613c272727279229,ccacb5b919d9d938

Scan History

Scan history not available

Unable to load historical scan data