Security Scan Report: workwithapex.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 14 HTTP transactions. The main domain is workwithapex.xyz and was registered 2 weeks ago.

Submitted URL: https://workwithapex.xyz/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Web3 recruitment page tied to an analyst-vetted ClickFix kit that tricks applicants into running a clipboard command which installs the OverLord stealer.

Risk Factors (5)
Known malicious recruitment/ClickFix kit identified by analyst-vetted roster and hunting rule
ClickFix clipboard-execution payload installing the OverLord infostealer
HIGH-severity IDS PowerShell stager alert tied to the page session
Fabricated job-recruitment lure aimed at Web3/crypto developers
Disposable .xyz domain with no reputation and unknown age
Domain age information unavailable

Details

Page Title

VP — Smart Contract Architect | Everforth Apex

Scan Type

public

Domain Name Analysis

Within the open generic top-level domain (.xyz), 'workwithapex.xyz' is registered and has no subdomain. Its registrable label 'workwithapex' stretches across 12 characters with 4 vowels and eight consonants. Breaking it apart gives three words: work, with, apex. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

eee, VP — Smart Contract Architect = 0%: ume: Early applicants open ) ( Job#3041405 ) ( Solidity-EVM- Institutional DeFi SISOR - $250 vase range-tarcwithrecruter This is the kind of role where your...

Page Load Overview

2.47s
Total Load Time
339 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,738 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(96%)🇳🇱nl(4%)

Website Classification

Primary Category

technology software93% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
93%
cryptocurrency blockchain
89%
government public service
79%
finance banking
79%
adult content
64%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8193.160.32.188Nuremberg, Bavaria, Germany
AS206216Advin Services LLC
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
144--

Detected Technologies2

Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180E18371B1F1142703539AE679D07B66ADE2040BC6AD5142B2FC135CAFADE83F95322E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nM23n69hUDKLc6sXuLHwSmN6bEEbL/rqe3EEyyN8bPhGGweGzr:rn6QDQc61LHBmN6bEiL/dTL4PHwZH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6823:JCIJBARoTlBCBSECqAp4gMA1QCJoAABgSAQnAAKoCACQAOiBCMSqGBiEAxEDIExcYMiAIIEgaQhGUggIgJyghAICAlSFsACB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c07c3c3c3c3c2600
Perceptual Hash:c6c938666d326da6
Difference Hash:86e0e0e8e0e0cd27
Wavelet Hash:e0fc7c7c3c3c2701
Color Hash:38003000180

Other Hashes

Crop Resistant:86e0e0e8e0e0cd27

Scan History

Scan history not available

Unable to load historical scan data