ScanMalware.com

Security Scan Report: ritualtalents.xyz

Redirected to:
https://ritualtalents.xyz/conversation
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ba6cb74c-9647-4e95-b98d-2f260a575dddDomain and IP registration (RDAP)/api/v1/rdap/ba6cb74c-9647-4e95-b98d-2f260a575dddHow often this domain was scanned/api/v1/domain/stats/ritualtalents.xyzScan history for this domain/api/v1/domain/history/ritualtalents.xyz?limit=15
This website contacted 5 IPs in 2 countries across 3 domains to perform 29 HTTP transactions. The main domain is ritualtalents.xyz and was registered 2 weeks ago.

Submitted URL: https://ritualtalents.xyz/

Effective URL:
https://ritualtalents.xyz/conversation
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed fake 'Ritual Labs' careers portal running a known recruitment ClickFix kit that installs the OverLord stealer; never paste or run the verification commands.

Risk Factors (5)
Known malicious recruitment/ClickFix kit identified by analyst-vetted roster and native hunting rule
PowerShell stager traffic observed by IDS (HIGH severity)
Brand impersonation of Ritual Labs on an unranked, unrelated domain
Referral/verification gate funnel consistent with the documented stealer delivery chain
Job-application data harvesting (name, email, GitHub identity)
Domain age information unavailable

Details

Page Title

Ritual | Apply

Scan Type

public

Domain Name Analysis

Domain 'ritualtalents.xyz' uses the open generic top-level domain (.xyz) and has no subdomain. Its registrable label 'ritualtalents' stretches across 13 characters holding 5 vowels versus eight consonants. Splitting it apart reveals two words: ritual, talents. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

© PRIVATE INVITATION Apply to Ritual Share your name, email, GitHub and preferred role to continue. PERSONALINFORMATION | PREFERREDROLE — GITHUB—— SUBMIT Fullname * Email* GitHub * https://github....

Page Load Overview

2.24s
Total Load Time
817 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:888 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(88%)🇫🇷fr(6%)🇩🇪de(6%)

Website Classification

Primary Category

social media network40% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
40%
cryptocurrency blockchain
30%
technology software
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17193.160.32.188Nuremberg, Bavaria, Germany
AS206216Advin Services LLC
10142.250.154.94Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.127.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
295--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1F1FD66A0F85437011382C65AE1EB19BFE1819BCA151849B2EC0F985FB9D43FA1732E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:1hGhUTXigLyeChwFihRKSBCRaSORfS18iWRnSUmzi1tRjSUBpSliJNF8a1dBO:1hGhOyGtChLq318mPzi4Zlivz1dc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7573:BoBSDVxAxHAABRuYUiIUiB0IDIkUFioRRAAQIISRGtgOJhIQCANLYMCXCbABUxAYlEjMBnAQMEwAoVqggJqhACoTEKxGSAFa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f94940041c0c1c3c
Perceptual Hash:da6acacacaca7819
Difference Hash:29119c2830103960
Wavelet Hash:fd800004fcdcdcfc
Color Hash:07018000600

Other Hashes

Crop Resistant:29119c2830103960

Scan History

Scan history not available

Unable to load historical scan data