ScanMalware.com

Security Scan Report: pipayexchange.net

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8cb826d3-c536-4739-86fd-1891afea0cf1Domain and IP registration (RDAP)/api/v1/rdap/8cb826d3-c536-4739-86fd-1891afea0cf1How often this domain was scanned/api/v1/domain/stats/pipayexchange.netScan history for this domain/api/v1/domain/history/pipayexchange.net?limit=15
This website contacted 4 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is pipayexchange.net and was registered 5 months ago.

Submitted URL: https://pipayexchange.net/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unofficial domain presenting itself as Pi Network's Pioneer-to-Pioneer marketplace and prompting wallet activation; flagged as phishing by one unverified source. Brand impersonation of Pi Network drives a high-risk rating despite no detected forms.

Risk Factors (4)
Brand impersonation of Pi Network on a non-official domain (pipayexchange.net)
Single-source phishing threat-intelligence report against the scanned primary domain
Wallet-activation prompt aimed at holders of migrated Pi assets ('escrow', KYC-gated) — asset-drainage/social-engineering pattern
Reuses Pi Network trademark, whitepaper, community and legal links to mimic the official project
Domain age information unavailable

Details

Page Title

Pioneer 2 Pioneer Market

Scan Type

public

Domain Name Analysis

The domain 'pipayexchange.net' uses the network infrastructure generic top-level domain (.net). Count 13 characters in 'pipayexchange' holding 5 vowels versus eight consonants. Breaking it apart gives 3 words: pi, pay, exchange. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pipayexchange.net/

Page Load Overview

0.50s
Total Load Time
317 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,238 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical86% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
86%
technology software
68%
cryptocurrency blockchain
55%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
423.153.104.17United States
AS32561Aquiryn LLC
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Detected Technologies4

Bootstrapv5.3.3
50%
LiteSpeed
40%
HTTP/3
40%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB121D7095F2257B1093D0E57BB55B4AABA0D487DA6BC64833FC57C84FD2E82895328C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Dwuecu5lYjhV1EocL1DofTvlmZrBuU/tsubl+m7cYJqv:DEaEldB2ubl+ocYIv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9803:dHYUdkWhADADaI0FQFGEwgCkICUCzBoYqxb4AgZTGAUtPgAQEAoQKV0gAOwYIdAkAiArGCzFcertKnyAAAFgFNASCoHyCMcJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001800003c3c3c19
Perceptual Hash:8b64649b6466f353
Difference Hash:91717131797969b5
Wavelet Hash:003d19013d3d3dff
Color Hash:#40bf82

Other Hashes

Crop Resistant:cbcbcbcbe0c1c8c6,31094914b49a9291,2069b0b4b6b0d2d2,91717131797969b7

Scan History

Scan history not available

Unable to load historical scan data