Security Scan Report: payback.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 27 IPs in 2 countries across 18 domains to perform 131 HTTP transactions. The main domain is payback.com and was registered 29 years ago.

Submitted URL: https://payback.com/

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Ageing domain self-branded as a scam-funds 'recovery' service; one unverified single-source phishing report plus an upfront-fee model. No credential or payment forms on page, but avoid sending case details or money.

Risk Factors (3)
Single-source community phishing report on the primary domain (low corroboration, unverified)
Upfront-fee 'funds recovery' business model with guaranteed-outcome language, a widely abused scam category
Solicits personal case details and phone numbers from self-identified fraud victims over unauthenticated forms
Domain age information unavailable

Details

Page Title

PayBack : Trading & Investment Scam Funds Recovery

Scan Type

public

Domain Name Analysis

The domain 'payback.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'payback' spans 7 characters holding 2 vowels versus 5 consonants. Word splitting yields 2 words: pay, back. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

@ Paveack —_rextimonias Get your money services Y Online Safety v We use cookies - Here’ Blog ¥ Payback v back from a scam Thousands of clients used our Investigation Report to retrieve their l...

Page Load Overview

2.19s
Total Load Time
6.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:26,057 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking40% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
40%
cryptocurrency blockchain
34%
education learning
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4146.75.120.157Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
418.64.16.64Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
4142.251.155.119Google · CDNUnited States
AS15169Google LLC
4192.178.183.148Google · CDNUnited States
AS15169Google LLC
4162.159.140.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13127--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AFB4C5B3425431764033C3D430A6577BF29B5DAFFAA70E044BECCBE66BDAC98644A449

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:djo2YxrnC5vFnhg2j5vpCsoybPOGVg5l0LpUym2BW/UnZRTknPSRIhIEBa4QuoUP:j4GhtCrHVqKWRbJ0/pZGlfmWX5sU075

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:508262:PhYohESCDqhaAIhBTAHgzGJAAehMhhqJlgMEAhqIEUoiKCQGVJhIIoCIUSRVAAXAIEYoDBImIHwoXKyABF3QoFAQMBkCyQmE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0004060404ffffff
Perceptual Hash:9616e9e930e9cd16
Difference Hash:85ecececec6c82cc
Wavelet Hash:0006060606ffffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data