ScanMalware.com

Security Scan Report: inv2bullish.xyz

Redirected to:
https://inv2bullish.xyz/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7beb380b-6a5e-48ed-902e-a3acb50f86b2Domain and IP registration (RDAP)/api/v1/rdap/7beb380b-6a5e-48ed-902e-a3acb50f86b2How often this domain was scanned/api/v1/domain/stats/inv2bullish.xyzScan history for this domain/api/v1/domain/history/inv2bullish.xyz?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 36 HTTP transactions. The main domain is inv2bullish.xyz and was registered 1 week ago.

Submitted URL: http://inv2bullish.xyz

Effective URL:
https://inv2bullish.xyz/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Impersonates Bullish careers on unofficial domain; HIGH IDS alert for PowerShell stagers indicates malware/C2. Avoid and report.

Risk Factors (3)
Brand impersonation of Bullish on unofficial domain inv2bullish.xyz
HIGH IDS alert for PowerShell stager activity (malware/C2)
Domain unranked in Cisco Umbrella (low reputation)
Domain age information unavailable

Details

Page Title

Private Invitation | Bullish Careers

Scan Type

public

Domain Name Analysis

Domain 'inv2bullish.xyz' uses the open generic top-level domain (.xyz) and has no subdomain. The second-level label 'inv2bullish' is 11 characters long holding three vowels versus 7 consonants, plus 1 digit. Tokenizing the label suggests 4 words: in, v, 2, bullish. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://inv2bullish.xyz

Page Load Overview

2.10s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,725 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain34% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1265.110.40.18United States
AS22295Advin Services LLC
12142.251.110.95Google · CDNUnited States
AS15169Google LLC
12142.251.14.94Google · CDNUnited States
AS15169Google LLC
363--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T194B23116E4FE3833037391E66DA21666EFE0D58BC68846407AAD43582FF7D42BA4351F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:QlYxVbPh/fEhx5McSpKAeDXdggxqCzciT6qopW/okvuDgocvp30+QEziv8HK8BF3:eYxV93Ehx5Hp/zdgcqUcimOFk0HK8Zd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24855:ayGKQMww9AEYOQDgIdD8IoyAwIQjlIVg6QYJAA4EFSEeXCQNYLkDA0UPLSYELBEJIjojJpEkQhQgFIEYYKgCMGwAQEKgi1TI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9181353535310109
Perceptual Hash:8ab439c7c738c6c6
Difference Hash:3101656d69691171
Wavelet Hash:ff81353d3d310199
Color Hash:N/A

Other Hashes

Crop Resistant:560680000000200e,00118c31316c0100,3101656d69691171

Scan History

Scan history not available

Unable to load historical scan data