ScanMalware.com

Security Scan Report: minabuilders.site

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/421b96c5-25c7-42f2-8896-b9ad6e52c9e9Domain and IP registration (RDAP)/api/v1/rdap/421b96c5-25c7-42f2-8896-b9ad6e52c9e9How often this domain was scanned/api/v1/domain/stats/minabuilders.siteScan history for this domain/api/v1/domain/history/minabuilders.site?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is minabuilders.site and was registered 2 days ago.

Submitted URL: https://minabuilders.site/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Analyst-vetted recruitment ClickFix kit delivering the OverLord stealer, with a CRITICAL hunting-rule hit and a HIGH PowerShell-stager IDS alert, impersonating Mina Protocol/o1 Labs on an unrelated domain.

Risk Factors (5)
Known malicious kit family (OverLord stealer recruitment/refcode ClickFix) confirmed by analyst-vetted roster
CRITICAL hunting rule hit for Recruitment_Refcode_ClickFix_Kit on the HTML body
HIGH IDS alert for PowerShell stager command traffic
Brand impersonation of Mina Protocol / o1 Labs on a non-official domain
Referral-code gated 'private research invitation' funnel designed to deliver a clipboard-executed malware command
Domain age information unavailable

Details

Page Title

Recursive State

Scan Type

public

Domain Name Analysis

The domain 'minabuilders.site' uses the .site top-level domain and has no subdomain. Its registrable label 'minabuilders' stretches across 12 characters holding 5 vowels versus 7 consonants. Tokenizing the label suggests 2 words: mina, builders. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

m PRIVATE INVITE FOR RESEARCHERS — REFERRAL REQUIRED - NOT A PUBLIC CAREERS SITE habs START BUILDING m PRIVATE INVITE FOR RESEARCHERS RECURSIVE STATE BUILD SMALL. PROVE EVERYTHING. Explore the en...

Page Load Overview

4.18s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,260 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(93%)🇳🇱nl(3%)🇮🇹it(2%)🇪🇸es(2%)

Website Classification

Primary Category

documentation technical81% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
81%
technology software
72%
cryptocurrency blockchain
68%
government public service
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15193.160.32.243Nuremberg, Bavaria, Germany
AS206216Advin Services LLC
151--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E532CBE0D0F166F7002291D7559EFB1A7DE88017D19D2448B3BE67A40FAECC2F92B51A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:G3JLU+Rhd/j5uFzPeZexIC6F1MmDmNenRBOJw34hxQP:G3JLpRj/j5uFzPeZexI/F1MmDmNenRB5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11979:gYGqJHxGAFLAScleJiABtQICCBW1BLVEQLDgEOAsRiRiAtrgFoBhSCoSIAACQVgTjEwiwCFAAAAG1Vj43ICkAJaRPEVggKIV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff878fffff0000
Perceptual Hash:bcad47c3133db444
Difference Hash:4b63161e98106070
Wavelet Hash:b9ff838fc7cf0000
Color Hash:06000e00000

Other Hashes

Crop Resistant:4b63161e98106070,920895001455d050

Scan History

Scan history not available

Unable to load historical scan data