Security Scan Report: account.payoneer.com

Redirected to:
https://login.payoneer.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 46 IPs in 3 countries across 30 domains to perform 142 HTTP transactions. The main domain is payoneer.com and was registered 21 years ago.

Submitted URL: https://account.payoneer.com/

Effective URL:
https://login.payoneer.com/
Redirected

The Cisco Umbrella rank of the primary domain is #247,217 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

Payoneer's own login page on its official payoneer.com domain, redirecting to a same-brand SSO endpoint. No impersonation, exfiltration, or threat-intel hits — ordinary legitimate account sign-in.

Safety Factors (5)
Official payoneer.com domain with same-registrable-domain SSO redirect
Consistent Payoneer branding, footer '© 2005–2026 Payoneer Inc.', contact and sign-up links to the same brand
Cross-origin credential exfiltration explicitly ruled out by scanner
Clean threat intelligence, YARA and IDS results
Device-fingerprint WebAssembly module is a known bot-protection library, not malware
Domain age information unavailable

Details

Page Title

Payoneer Login

Scan Type

public

Domain Name Analysis

The domain 'account.payoneer.com' uses the commercial generic top-level domain (.com) and includes subdomain 'account'. The second-level label 'payoneer' is 8 characters long holding four vowels versus four consonants. Tokenizing the label suggests three words: pay, one, er. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://account.payoneer.com/

Page Load Overview

12.64s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:618 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
43%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7172.66.2.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3143.204.181.89Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
391.235.132.130United States
AS30286ThreatMetrix Inc.
334.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
318.245.86.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3108.138.26.79Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
354.192.35.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
354.192.35.96Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
313.226.244.91Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
14246--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB833CD02280293451138AEF35AE471CB27DD149D907ACD47AEC16AB3FD6EB936A770C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FqmumXmHmzrmgm8mHI6WXpBUCCjMTQHTH47t9tqy8yibZyvqYrAm+3EEHgKijkKE:B0I6WXSHTOtqy8yibZyvqYrAm+3EEHgO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82756:S1NhdhjEAbDEFGKQUgRAIZECjDQGC0PpkQYxcQaChGIkQEE4cEECjhIKtgDBhQlQz8CpMhQHohUkwmQyiANgigdUhaQIAEIC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:caa564739a89f236
Difference Hash:63076161696916e1
Wavelet Hash:b0b0bcbc3cfcf060
Color Hash:#c3c587

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data