ScanMalware.com

Security Scan Report: bit2talents.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6bedd1d8-df54-4b71-a733-6f5cb03660bdDomain and IP registration (RDAP)/api/v1/rdap/6bedd1d8-df54-4b71-a733-6f5cb03660bdHow often this domain was scanned/api/v1/domain/stats/bit2talents.xyzScan history for this domain/api/v1/domain/history/bit2talents.xyz?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 26 HTTP transactions. The main domain is bit2talents.xyz and was registered 3 weeks ago.

Submitted URL: https://bit2talents.xyz/

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Unofficial 25-day-old .xyz page posing as BIT/Matrixport careers, borrowing the Matrixport name and Cactus Custody trademark; no forms yet, but a HIGH IDS stager alert and encoding JS warrant avoidance.

Risk Factors (5)
Impersonation of the BIT/Matrixport crypto-finance brand on an unofficial, 25-day-old .xyz domain
Use of a third party's proprietary product name ('Cactus Custody™') to lend credibility
Self-described 'demonstration' portal contradicting institutional finance claims
HIGH-severity IDS alert for PowerShell stager traffic in the network session
Obfuscation-style encoding/decoding functions in inline JavaScript
Domain age information unavailable

Details

Page Title

BIT | Careers

Scan Type

public

Domain Name Analysis

Domain 'bit2talents.xyz' uses the open generic top-level domain (.xyz) with no subdomain. Its registrable label 'bit2talents' stretches across 11 characters holding three vowels versus seven consonants; bonus characters include 1 digit. Splitting it apart reveals three words: bit, 2, talents. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bit2talents.xyz/

Page Load Overview

1.14s
Total Load Time
318 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,847 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software67% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
67%
cryptocurrency blockchain
64%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10208.84.100.64United States
AS22295Advin Services LLC
8142.250.154.95Google · CDNUnited States
AS15169Google LLC
8142.251.110.94Google · CDNUnited States
AS15169Google LLC
263--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C3920357D1F2302B0153429269621F1E7FE4A687D99A1468B7EC07869FE2C4BFC53A0F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Y3bxN8XKJ3Ufh2HTLSzoHguMjvV+YkYrZHzmKzuvFP+IG5Ndy:YrxN867I5ZmKzuvFPhG5ny

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20794:+ViDiWgeyBAAwFzPJGKIQQQEAyEQEAAohGUggQWwsLSasAADxQTmaIQbQ5DLFCWDCsQBwALE09qwIANRPYApAgAtpmjMAMcI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdfffb818191bfff
Perceptual Hash:edd2924b691ec6c1
Difference Hash:4110433333636200
Wavelet Hash:b9ff918100009bff
Color Hash:N/A

Other Hashes

Crop Resistant:4110433333636200

Scan History

Scan history not available

Unable to load historical scan data