Security Scan Report: paxosi.icu

Redirected to:
https://paxosi.icu/#/home
Site favicon
Submitted: Dec 8, 2025, 4:11:09 PMCompleted: Dec 8, 2025, 4:11:43 PMpubliccompleted

Summary

This website contacted 54 IPs in 4 countries across 12 domains to perform 150 HTTP transactions. The main domain is paxosi.icu and was registered 8 months ago.

Submitted URL: https://paxosi.icu/

Effective URL: https://paxosi.icu/#/homeRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New, unranked site impersonating PAXOS – confirmed phishing scam.

Risk Factors
Brand impersonation on a newly registered, unranked domain
Critical domain age (<7 days) multiplier applied
Lack of legitimate content or verification
Domain age information unavailable

Details

Page Title

PAXOS

Scan Type

public

Language

🇯🇵

Japanese

(80% confidence)

Category

education learning

(99%)

Domain Information

Within the .icu top-level domain, 'paxosi.icu' is registered and has no subdomain. The second-level label 'paxosi' is 6 characters long with three vowels and three consonants. It segments into two words: pax, osi. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of api.paxosi.icu

Page Load Overview

2.79s
Total Load Time
150
HTTP Requests
12
Domains
1.4 MB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

Language Code:ja
Detection Confidence:80%
Script Type:Mixed
HTML Lang Attribute:ja
Text Length:2,932 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning99% confidence
Type: static
Method: ml+structural

All Detected Categories

education learning
99%
cryptocurrency blockchain
68%
finance banking
60%
adult content
50%
technology software
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4418.245.31.61United States
AS16509AMAZON-02
2104.18.23.242United States
AS13335CLOUDFLARENET
218.173.205.38United States
AS16509AMAZON-02
2104.21.71.236United States
AS13335CLOUDFLARENET
2108.138.7.107United States
AS16509AMAZON-02
23.167.227.65United States
AS16509AMAZON-02
218.173.205.40United States
AS16509AMAZON-02
2104.18.22.242United States
AS13335CLOUDFLARENET
218.245.31.81United States
AS16509AMAZON-02
2192.178.170.95United States
AS15169GOOGLE
15054--

Page Statistics

150
Requests
15
Unique Domains
7.3 MB
Total Size

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143B4CF35B614463F463787D9A5322A2A626EE7AFD4D205C213BD42707FE3EE0F94D4A0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:+id9kEUX3xGiqFGMt0WziGR/d8DQIxvs8xfN:nXeHxG/YrqiGR/gDtdN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:503628:kClVFEBJEgEgCVQkoEBnGk2ZABEmUCB0ElegcMAEjgYwwCgTyBDUlgI4VgNhYLGlRQ3RSAEGwARDqiiAkqQCQBagC0DBijQW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fb0c6e6c0cf30000
Perceptual Hash:92b26d6d8be3e0b0
Difference Hash:03989cc86996c0c1
Wavelet Hash:ff4a4e6c2cff0050
Color Hash:#7753ac

Other Hashes

Crop Resistant:03989cc86996c0c1

Scan History

Scan history not available

Unable to load historical scan data