Security Report: paybackcapitals.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/83ab4d31-9b07-419e-8fa7-80258347e0b4 Domain and IP registration (RDAP)/api/v1/rdap/83ab4d31-9b07-419e-8fa7-80258347e0b4How often this domain was scanned/api/v1/domain/stats/paybackcapitals.com Scan history for this domain/api/v1/domain/history/paybackcapitals.com?limit=15

This website contacted 13 IPs in 3 countries across 7 domains to perform 106 HTTP transactions. The main domain is paybackcapitals.com and was registered 1 year 2 months ago.

Submitted URL: https://paybackcapitals.com/

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Crypto fund-recovery site whose own domain is flagged for phishing, with victim-targeting fee lures and 33 cross-domain redirects. Threat intel is single-source and no credential form exists, so HIGH_RISK rather than confirmed scam.

Risk Factors (5)

Primary domain flagged for phishing by threat intelligence (single-source, unverified)

Two additionally loaded resource domains flagged for phishing

Crypto 'fund recovery' service targeting prior scam victims — hallmark of advance-fee recovery scams

33 cross-domain redirects in the capture chain

Context-menu blocking / anti-analysis JavaScript

Domain age information unavailable

Details

Page Title

Payback Capitals - Experts in reclaiming lost fundsother network

Scan Type

public

Favicon Hash

MMH3: 1443584349

MD5: f3b351848e982fc048c7a706765c4b47

Domain Name Analysis

The domain 'paybackcapitals.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'paybackcapitals' spans 15 characters split between five vowels and ten consonants. Tokenizing the label suggests 3 words: pay, back, capitals. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Paybackcapitals HOME RECOVERY CONTACTUS FAQ Lost your money from a scam? Need help Recovering stolen funds? Thousands of clients used our Investigation Report to retrieve their losses. Start with se...

Page Load Overview

4.82s

Total Load Time

654 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:53%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de-DE

Text Length:8,341 chars

Detector Agreement:100%

Language mismatch: Declared as de-DE but detected as en

Website Classification

Primary Category

cryptocurrency blockchain81% confidence

Type: spa

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

81%

adult content

50%

government public service

44%

finance banking

34%

phishing scam

31%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	15.235.54.156	Canada	AS16276OVH SAS
8	104.26.13.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.26.15.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	20.250.119.67Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
8	104.16.150.108Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	172.67.68.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	185.199.109.133Fastly · CDN	United States	AS54113Fastly, Inc.
8	172.67.68.204Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.16.151.108Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.26.14.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
106	13	-	-