ScanMalware.com

Security Scan Report: payback.at

Redirected to: https://www.payback.at/

Site favicon
Submitted: Feb 1, 2026, 7:44:43 PMCompleted: Feb 1, 2026, 7:45:58 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 4 domains to perform 12 HTTP transactions. The main domain is payback.at and was registered NaN years ago.

Submitted URL: https://payback.at

Effective URL: https://www.payback.at/Redirected

AI Security Verdict

High Risk

Confidence: 92%

10
Risk Score

New Payback domain with credential form likely phishing – do not provide any login details.

Risk Factors
Very new domain (<30 days) registered on 2026-01-21
Credential harvesting form with visible password field
Hidden password field (type="password" with CSS hide)
Unranked domain for a well‑known brand (Payback)
Potential brand impersonation on a suspicious domain
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by imperva bot protection. Our scanner was challenged or blocked during access.

Page Title

PAYBACK Österreich: Punkten und belohnen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

finance banking

(75%)

Domain Information

Domain 'payback.at' uses the Austrian country-code top-level domain (.at) without a subdomain. Count 7 characters in 'payback' split between 2 vowels and five consonants. Breaking it apart gives 2 words: pay, back. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://payback.at

Page Load Overview

1.97s
Total Load Time
27
HTTP Requests
4
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de-AT
Text Length:6,797 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking75% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
75%
e-commerce shopping
72%
healthcare medical
66%
technology software
59%
government public service
58%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1445.60.14.82United States
AS19551Incapsula Inc
13104.18.86.42United States
AS13335Cloudflare, Inc.
272--

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
OneTrust
60%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144435231A9FC483F027FBAE6F126AB406D97E307C2872BE572DC41958BE4D518E17924

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Xc537GpEmrebMpFGI6I8PlNLZsyrM67O8Vmq8:X6qpEmSbNI6I8PlNLZsyw67OY8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:58790:QAABLEAIEtSkKzlAIAaLSEzCwFSTkoISCiAVRAAGWS8IxAUoLUTNB/IFEA1GAQEDhKIczA0UwAAAkkiAEBAoDdYyikAEFJEY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00c7c3dbffcfc7ff
Perceptual Hash:b84e77534f394c06
Difference Hash:4e8eb6b24d9a9e97
Wavelet Hash:00c3c3dbe7c3c3c3
Color Hash:#9d40bf

Other Hashes

Crop Resistant:4e8eb6b24d9a9e97,41cd49c1d5c5c9c1,d1aaaaa9495ea8a9,3c6d3e76c6278f92,f33d2e934d921120,4c4d4ee475351b1b

Scan History

Scan history not available

Unable to load historical scan data