ScanMalware.com

Security Scan Report: workwithosl.online

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f595dfa1-8086-4d28-b435-b77687e6d13dDomain and IP registration (RDAP)/api/v1/rdap/f595dfa1-8086-4d28-b435-b77687e6d13dHow often this domain was scanned/api/v1/domain/stats/workwithosl.onlineScan history for this domain/api/v1/domain/history/workwithosl.online?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is workwithosl.online and was registered 2 days ago.

Submitted URL: https://workwithosl.online/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Analyst-vetted ClickFix recruitment kit impersonating OSL careers: referral-code gated fake jobs page that delivers a command installing the OverLord stealer. Do not apply, do not run any copied command.

Risk Factors (5)
Known malicious ClickFix/OverLord stealer recruitment kit identified by hunting rule and analyst-vetted kit roster
Impersonation of OSL Group's careers/technology brand on a non-official domain (workwithosl.online vs osl.com)
Referral-code gate funnel used to deliver a clipboard-executed malware command to job applicants
IDS HIGH alert for PowerShell stager traffic
Unranked domain with no published creation date claiming to be a large regulated exchange
Domain age information unavailable

Details

Page Title

OSL | Careers & Technology

Scan Type

public

Domain Name Analysis

The domain name 'workwithosl.online' uses the modern generic top-level domain (.online). Its registrable label 'workwithosl' stretches across 11 characters containing 3 vowels alongside 8 consonants. Word splitting yields 4 words: work, with, os, l. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

OSL CAREERS Technology careers at OSL Join engineers building regulated stablecoin trading, payments, custody and digital-asset infrastructure. Apply Now View openroles } COMPANIES CNBC WORLD’S...

Page Load Overview

3.59s
Total Load Time
984 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,591 chars
Detector Agreement:88%

All Detected Languages

🇺🇸en(95%)🇪🇸ca(3%)🇩🇪de(2%)

Website Classification

Primary Category

technology software92% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
92%
cryptocurrency blockchain
86%
documentation technical
28%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
965.110.40.18United States
AS22295Advin Services LLC
91--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18132653171F119330213A6C46AA6FB25AFE1900BDB5D178172EC43A8EF93D56ED6324E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:n4OHzfLIM6NL7KcxWi7spaftPphtLj5p4pyoW6I+7CvFhLPtmBTHvbg+GdsH:48vIJZKc2gFBDgr2xSHDdGdK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11574:CmGAeQgkhUIcAQQsEovyJQBGTJRGJ4gfYKGS52KFcgyAgyApIjkEwlQE7WMCTshCBA1SPAeAMpgCAJ+QCACIsIBYGKSWoEGQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:060000666e640000
Perceptual Hash:d33c2c92966d619e
Difference Hash:960080cccccc0084
Wavelet Hash:42004e6efefe0000
Color Hash:3800000f000

Other Hashes

Crop Resistant:960080cccccc0084

Scan History

Scan history not available

Unable to load historical scan data