ScanMalware.com

Security Scan Report: pay.bixa.ai

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/41ec7b35-063f-4779-8348-430181c2c2a4Domain and IP registration (RDAP)/api/v1/rdap/41ec7b35-063f-4779-8348-430181c2c2a4How often this domain was scanned/api/v1/domain/stats/pay.bixa.aiScan history for this domain/api/v1/domain/history/pay.bixa.ai?limit=15
This website contacted 2 IPs in 1 country across 2 domains to perform 17 HTTP transactions. The main domain is bixa.ai and was registered 2 years ago.

Submitted URL: https://pay.bixa.ai

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Self-branded Persian AI studio page with no forms, no impersonation and no malware indicators; rating reflects only a Spamhaus DROP-listed hosting network flagged by IDS.

Risk Factors (1)
Network IDS HIGH alert for Spamhaus DROP-listed traffic associated with the hosting address (ET DROP, Misc Attack category)
Safety Factors (6)
Domain and page branding are consistent (self-branding, not brand impersonation)
No credential, login or payment forms present on the captured page
No hunting rule/JavaScript malware, no obfuscation, no credential exfiltration behavior
No malicious kit identified in the analyst-vetted kit roster
Content reads as a genuine Persian-language AI tool and course landing page
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

bixa — استودیوی هوش مصنوعی، به فارسی

Scan Type

public

Domain Name Analysis

The domain name 'pay.bixa.ai' uses the Anguillan country-code top-level domain (.ai); it also runs on subdomain 'pay'. Count 4 characters in 'bixa' containing 2 vowels alongside two consonants. Word splitting yields two words: bix, a. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

bixa studio academy 121995 Obj 4 gsdgteel 39 1459 goad luo «ging yas loUjgel - bixa academy € bixa studio 4; 999 Ho 195 9 0948 Slur alddls gly jisrgy nial bixa studlo jo >

Page Load Overview

75.24s
Total Load Time
433 KB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa
Text Length:1,159 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
53%
education learning
48%
technology software
46%
entertainment media
44%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
962.60.191.175Iran
AS213852Tose'e Shabakeh Azad Ltd
8212.16.67.4Iran
AS34837Institute for Research in Fundamental Sciences
172--

Detected Technologies3

Open-Graph-Protocolvwebsite
100%
HSTS
40%
eNamad
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15BD33B7152E1223B7033C1EDA7DF67897239E007F9078884B56CA2650FD99B425B7AF8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:7Ktw4blJbMevFy+jL8p/vLtII4VZJE5T2OEbeVHRf:7kw4bzMYy+jL8p/vLoZ+wOEbeVV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130940:EZRjBQlqBBElAYkkQNBCA4BJIQWAFIaoOSIYJJgKjCRGimdhSEVEIWIQSoVWAUVCQkJEjgJEZiVowYoSlQqiSIhSWYCghQQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018180018180010
Perceptual Hash:89cc663373669999
Difference Hash:0db3b335337b2561
Wavelet Hash:193d3d19193d193d
Color Hash:N/A

Other Hashes

Crop Resistant:6a6823a25b593b23,0db3b335337b2561

Scan History

Scan history not available

Unable to load historical scan data