Security Scan Report: mantlehires.xyz

Redirected to:
https://mantlehires.xyz/conversation
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 56 HTTP transactions. The main domain is mantlehires.xyz and was registered 2 weeks ago.

Submitted URL: https://mantlehires.xyz/

Effective URL:
https://mantlehires.xyz/conversation
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unranked .xyz page posing as Mantle's careers portal to collect name, email and GitHub details via a 'private invitation' funnel; HIGH IDS alerts on traffic. No official-domain or form-authentication evidence.

Risk Factors (5)
Presents itself as the Mantle brand on a non-official, unranked .xyz domain (brand impersonation)
Multi-field PII collection (name, email, GitHub, role) behind a 'verification' step with no verifiable employer identity
3 HIGH-severity IDS alerts in the traffic (PowerShell stager signatures)
Exclusive 'private invitation' framing with no company contact, address, or verifiable hiring process
Hidden form fields (experience, architecture, intent) not visible to the applicant
Domain age information unavailable

Details

Page Title

Mantle | Apply

Scan Type

public

Domain Name Analysis

The domain name 'mantlehires.xyz' uses the open generic top-level domain (.xyz) and has no subdomain. Count 11 characters in 'mantlehires' holding 4 vowels versus seven consonants. It segments into two words: mantle, hires. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

© PRIVATE INVITATION Accept your Mantle invitation Share your name, email, and GitHub username to continue. PERSONAL INFORMATION PREFERRED ROLE = GITHUB_—— SUBMIT. Full name * Email * GitHub * h...

Page Load Overview

7.04s
Total Load Time
470 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:519 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(86%)🇫🇷fr(14%)

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
59%
government public service
42%
cryptocurrency blockchain
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
56193.160.32.243Nuremberg, Bavaria, Germany
AS206216Advin Services LLC
561--

Detected Technologies2

Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15EC1016360F1547F01E7C2D6AED6AB94FDE08317C6151C40B2EC46981FDAD83EA2762C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:1IZ4ACLa7WEChqfRj8SnCjMS0jJSZ8ojBSmn9b8zKctjFSU9oDiLds:1BAI6XChG0tZ8dm9b8zKlhDiLO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5914:Aw0oACAKAE4BKmBAAAAAkDlL8cgBEAAgDhIBxBcAAwkCwAEkDAQMmEgAuFBQEAAJYKCEIyCIQEUK0AxAFCgYBlaBAgQAACBj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:063838003838380c
Perceptual Hash:9eb496b4b2b4968c
Difference Hash:0463606068686179
Wavelet Hash:ff303c383c383c3c
Color Hash:38000000e00

Other Hashes

Crop Resistant:0463606068686179

Scan History

Scan history not available

Unable to load historical scan data