ScanMalware.com

Security Scan Report: workwitheigen.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8a134dcc-221a-4e24-868d-2fc0ce3c20a9Domain and IP registration (RDAP)/api/v1/rdap/8a134dcc-221a-4e24-868d-2fc0ce3c20a9How often this domain was scanned/api/v1/domain/stats/workwitheigen.xyzScan history for this domain/api/v1/domain/history/workwitheigen.xyz?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 20 HTTP transactions. The main domain is workwitheigen.xyz and was registered 1 week ago.

Submitted URL: https://workwitheigen.xyz/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake EigenCloud/EigenDA 'private invitation' careers portal on a 12-day-old look-alike domain, using the real brand's titles and imagery; no forms captured, but brand impersonation plus IDS and reputation signals make it unsafe.

Risk Factors (5)
Brand impersonation: uses EigenCloud/EigenDA branding on a mismatched vanity domain (workwitheigen.xyz) with no disclosure
Domain only 12 days old and unranked — consistent with throwaway phishing infrastructure
Privacy-invitation / referral framing designed to lower applicant guard and solicit personal and employment data
HIGH-severity IDS alert for PowerShell stager activity on the host
Deceptive hostname construction ('workwitheigen') mimicking an employment relationship with the brand
Domain age information unavailable

Details

Page Title

EigenDA | Careers

Scan Type

public

Domain Name Analysis

The domain name 'workwitheigen.xyz' uses the open generic top-level domain (.xyz). Count 13 characters in 'workwitheigen' containing five vowels alongside 8 consonants. It segments into four words: work, with, ei, gen. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://workwitheigen.xyz/

Page Load Overview

1.98s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,199 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain73% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
73%
technology software
72%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2065.110.40.18United States
AS22295Advin Services LLC
201--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10742013590F4253F415292B6B9D15B1AEED08507E6C70A05B3AD7F891FB1C9BEE8320C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:K2x2rUHfCHZdUkTBbiYT5fv8IfAuqVh9VW:K2x2CaHFd5fv8IfAjVhbW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12402:QMhkoQYSoUgQPOMbEozBkAIgSMCAFwWiHQsggmMBBUIAWhIbFqQZJFBoyAAiCAyKkTctAgWElsEYCQIMJkoQIFxmZgQJggMF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00387c7c7c7c3830
Perceptual Hash:c6182d253eb5b4da
Difference Hash:e0e1f0e0e0e0c0c0
Wavelet Hash:007c7c7c7c7e7830
Color Hash:N/A

Other Hashes

Crop Resistant:e0e0e0c0c0818100,e0e1f0e0e0e0c0c0

Scan History

Scan history not available

Unable to load historical scan data