ScanMalware.com

Security Scan Report: gpay-google.net

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/244999e9-3dae-4bda-b647-12a361b24096Domain and IP registration (RDAP)/api/v1/rdap/244999e9-3dae-4bda-b647-12a361b24096How often this domain was scanned/api/v1/domain/stats/gpay-google.netScan history for this domain/api/v1/domain/history/gpay-google.net?limit=15
This website contacted 3 IPs in 1 country across 3 domains to perform 4 HTTP transactions. The main domain is gpay-google.net and was registered 1 year ago.

Submitted URL: https://gpay-google.net

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Expired-domain parking page with a Google Safe Browsing social-engineering flag and a brand-mimicking 'gpay-google' hostname that pushes visitors to an unnamed sponsor. No forms found, but avoid interaction.

Risk Factors (4)
Google Safe Browsing social engineering detection on the domain
Expired/abandoned domain being monetised through an unknown sponsor redirect
Deceptive hostname imitating Google/Google Pay brand tokens
Unranked in Cisco Umbrella, no legitimate reputation despite 366-day age
Domain age information unavailable

Details

Page Title

Redirecting...

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'gpay-google.net' is registered. The registrable portion 'gpay-google' spans 11 characters containing 4 vowels alongside 6 consonants; it also includes 1 hyphen. Breaking it apart gives three words: g, pay, google. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gpay-google.net

Page Load Overview

0.72s
Total Load Time
16 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:392 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media83% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
83%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.236.104.43Chicago, Illinois, United States
AS63949Akamai Connected Cloud
1172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
1172.232.7.47Chicago, Illinois, United States
AS63949Akamai Connected Cloud
43--

Detected Technologies2

Nginx
50%
OpenResty
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17342C72689F320372183C06587B5E76AF564E1C3DD47C904BFDD43888FCADE688936A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Gt7WbBhBryl3b01g6E+/Oi7tFoQnLnMk92rusaqCKJSMhwhHNFHA0PjeDaGwl:k7WbBzXFNFHA0Pk2l

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12403:KiR0JQQAAcujAS4BABA5shEjdst8BJhgJzGEgBQDwRKETAkDHABNSkVAEtJIxvQtkiYgDUAkQhVIyAoIJAOWRmNdCABg0lxl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffe3ffffffffe7
Perceptual Hash:b63436526349676d
Difference Hash:0c2c06000000000c
Wavelet Hash:008180f6cfcfff00
Color Hash:#693a78

Other Hashes

Crop Resistant:0c2c06000000000c

Scan History

Scan history not available

Unable to load historical scan data