ScanMalware.com

Security Scan Report: pantherbuilders.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c7bc2861-4b19-4d01-920d-70a42d7533d2Domain and IP registration (RDAP)/api/v1/rdap/c7bc2861-4b19-4d01-920d-70a42d7533d2How often this domain was scanned/api/v1/domain/stats/pantherbuilders.xyzScan history for this domain/api/v1/domain/history/pantherbuilders.xyz?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is pantherbuilders.xyz and was registered 3 weeks ago.

Submitted URL: https://pantherbuilders.xyz/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake PantherTrade developer-recruitment portal running the OverLord stealer ClickFix kit: a referral code unlocks a clipboard command that installs malware. Confirmed malicious; do not interact.

Risk Factors (5)
Known malicious recruitment/ClickFix kit identified by analyst-vetted roster and hunting rule
Brand impersonation of PantherTrade on the unrelated domain pantherbuilders.xyz
ClickFix clipboard-injection technique that instructs victims to paste and run a shell command
HIGH-severity IDS alert for PowerShell stager command execution
Page text claims it 'never requests ... unknown executable downloads' and stresses 'human reviewers' — reassurance language contradicted by the detected clipboard-payload mechanism
Domain age information unavailable

Details

Page Title

PantherTrade Engineering | Developer Recruitment

Scan Type

public

Domain Name Analysis

Domain 'pantherbuilders.xyz' uses the open generic top-level domain (.xyz) while skipping any subdomain. The registrable portion 'pantherbuilders' spans 15 characters split between five vowels and ten consonants. Segmentation suggests two words: panther, builders. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pantherbuilders.xyz/

Page Load Overview

3.04s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,723 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
76%
cryptocurrency blockchain
35%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11208.84.100.64United States
AS22295Advin Services LLC
111--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E892FEA168F5E873002352E65992FF166FE09007C29D258173BE4BA81FEAC7EBD1351D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:4IkQFadNzJI768FC8EdGnZq3FRxo8+mcCfVwkAxOBr87k+nIL4iNPhaBWQMb98+L:4ZhhgZQr7+z6VTqIL4hZk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19990:GJkCUttAAEkAlYcEANEQ9O8AmBTCsqgJQFH5ZQIFFhwwIVgIIDoVFFAowJ9w95ABEGBKaKIxATIiFYC2gQCSCAIHgACkoaKW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2601017333630301
Perceptual Hash:a25e5cb585c5523e
Difference Hash:c445c1c7c7c7c703
Wavelet Hash:7f01617373772303
Color Hash:N/A

Other Hashes

Crop Resistant:ed0d0ced0deded2d,c445c1c7c7c7c703

Scan History

Scan history not available

Unable to load historical scan data