ScanMalware.com

Security Scan Report: inv2surge.xyz

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fc2b653b-eb76-4a02-8443-cb60d6c9a0e9Domain and IP registration (RDAP)/api/v1/rdap/fc2b653b-eb76-4a02-8443-cb60d6c9a0e9How often this domain was scanned/api/v1/domain/stats/inv2surge.xyzScan history for this domain/api/v1/domain/history/inv2surge.xyz?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 14 HTTP transactions. The main domain is inv2surge.xyz and was registered 2 weeks ago.

Submitted URL: https://inv2surge.xyz/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Single-source phishing report on the primary domain plus a HIGH IDS alert for PowerShell stager activity outweigh an otherwise form-free job listing.

Risk Factors (3)
Single-source phishing report on the primary domain
HIGH IDS alert for PowerShell stager activity
Domain is unranked and has unknown registration age while using a .xyz hostname
Domain age information unavailable

Details

Page Title

Senior Software Engineer | Surge Group

Scan Type

public

Domain Name Analysis

You're looking at domain 'inv2surge.xyz' on the open generic top-level domain (.xyz). Count 9 characters in 'inv2surge' with 3 vowels and five consonants, plus one digit. Tokenizing the label suggests 4 words: in, v, 2, surge. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://inv2surge.xyz/

Page Load Overview

2.05s
Total Load Time
415 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,447 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software89% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
89%
cryptocurrency blockchain
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6208.84.100.64United States
AS22295Advin Services LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
143--

Detected Technologies2

Ubuntu
40%
Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D7B13061B0F01426038696E6AA917FA8BCD24407C7981541F2FD835C3FA9FE7EB5321E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nvABkLc6slRFvbEErL2qGx5bE7eGGwXFGPr:vABqc68FvbE2L2zAWwsD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5468:BDSBBggAQOkAUUJgyJACyBEQIAggICCCCQAEAKEAwgAYhgQEAJARFgQcgBIAgQwCKwhABgYkgAhgIs2gIAnUBKAGAAAjBYgm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fde0c1c3c3c3e3ff
Perceptual Hash:e00ddf20f7327887
Difference Hash:8592868696968644
Wavelet Hash:e0c0c0c3c3c3e3ff
Color Hash:N/A

Other Hashes

Crop Resistant:d2f2f2f2f0d08ccc,8592868696968644,575fa39693938303

Scan History

Scan history not available

Unable to load historical scan data