Security Report: payfinance.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/878ca799-44d2-4fc2-8ff6-c940d949fca4 Domain and IP registration (RDAP)/api/v1/rdap/878ca799-44d2-4fc2-8ff6-c940d949fca4How often this domain was scanned/api/v1/domain/stats/payfinance.net Scan history for this domain/api/v1/domain/history/payfinance.net?limit=15

This website contacted 29 IPs in 3 countries across 19 domains to perform 195 HTTP transactions. The main domain is payfinance.net and was registered 1 year 4 months ago.

Submitted URL: https://payfinance.net/

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Primary domain is flagged as IcedID malware in two threat feeds and the site promotes a crypto investment scheme with guaranteed-style daily returns; treat as high-risk.

Risk Factors (4)

Content-malware threat-intel match: primary domain flagged as IcedID malware by two feeds

Investment scheme promising fixed daily returns and referral bonuses

Crypto-only deposit model with aggressive recruitment language

Low legitimacy signals despite domain age over one year

Domain age information unavailable

Details

Page Title

Pay Finance - Home

Scan Type

public

Favicon Hash

MMH3: 102684670

MD5: 4a6e691b141848850dc0e89d9aa5b76b

Domain Name Analysis

Domain 'payfinance.net' uses the network infrastructure generic top-level domain (.net) with no subdomain. The core label 'payfinance' covers 10 characters split between 4 vowels and 6 consonants. Segmentation suggests two words: pay, finance. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.40s

Total Load Time

3.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:21,345 chars

Detector Agreement:67%

Website Classification

Primary Category

finance banking60% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

60%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
27	92.113.23.244	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
6	92.113.16.27	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
6	142.251.14.95Google · CDN	United States	AS15169Google LLC
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.113Google · CDN	United States	AS15169Google LLC
6	195.181.175.41Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
6	216.150.1.129Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	172.66.43.89Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
195	29	-	-