ScanMalware.com

Security Scan Report: jointuring.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8d45a64f-b60b-4a87-a744-634c6cc97823Domain and IP registration (RDAP)/api/v1/rdap/8d45a64f-b60b-4a87-a744-634c6cc97823How often this domain was scanned/api/v1/domain/stats/jointuring.xyzScan history for this domain/api/v1/domain/history/jointuring.xyz?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is jointuring.xyz and was registered 3 weeks ago.

Submitted URL: https://jointuring.xyz/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unauthorized Turing-branded fake recruiting portal on jointuring.xyz that admits no affiliation and uses 'verification code + local terminal' steps alongside a HIGH PowerShell-stager IDS alert — avoid.

Risk Factors (4)
Impersonation of the Turing brand on a non-official domain (jointuring.xyz vs turing.com), with the page admitting it is unaffiliated ('inspired by turing.com', 'demo content until authorized')
HIGH IDS alert for a PowerShell NoProfile stager (ET ATTACK_RESPONSE), indicating malware/command-and-control activity
Terminal-based 'verification code' instructions typical of ClickFix-style malware delivery
Urgency/lure of a private, invitation-only paid role ($100–$150/hr) used to lower victim suspicion
Domain age information unavailable

Details

Page Title

Turing | Senior Blockchain Experts

Scan Type

public

Domain Name Analysis

You're looking at domain 'jointuring.xyz' on the open generic top-level domain (.xyz) with no subdomain. Its registrable label 'jointuring' stretches across 10 characters containing 4 vowels alongside 6 consonants. It segments into 2 words: join, turing. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jointuring.xyz/

Page Load Overview

1.79s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,910 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain81% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
81%
technology software
74%
documentation technical
34%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10208.84.100.64United States
AS22295Advin Services LLC
101--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F7921E7198F668B311EF81DB49521B267EE1D40FD25912417BBDA75E4FEFC02B90380A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:4hfP5UG77gQz8ojjnUF9yfXAyxf3sp1kvNeEAO8icrgs:40nWfU3qX793dvNeN7x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20120:2DBQATOAwEFHIAGpLcNQgzD60AVFBiCqoEg3hIigAsBiJjAl7UUwSASDCikCwAQRIoUBqVAoEbBlqApHAIEDlkCAUluCIQZh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0405077f7f192100
Perceptual Hash:a2b67cc9a5a65913
Difference Hash:dd4dcdeddbd1e59d
Wavelet Hash:0705077f7f7f2101
Color Hash:N/A

Other Hashes

Crop Resistant:dbdbda5b5a5a5a5b,dc4dcdefdbd1e59d

Scan History

Scan history not available

Unable to load historical scan data