ScanMalware.com

Security Scan Report: www.getpaint.net

Submitted: Apr 18, 2026, 1:03:43 PMCompleted: Apr 18, 2026, 1:04:51 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 6 domains to perform 29 HTTP transactions. The main domain is getpaint.net and was registered NaN years ago.

Submitted URL: https://www.getpaint.net/

The Cisco Umbrella rank of the primary domain is #307,809 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

The site appears legitimate with low risk; minor concerns stem from low ranking and heavy JS obfuscation, but no phishing or malware indicators are present.

Risk Factors
Low Cisco Umbrella ranking (307,809) for a site claiming a known brand
Critical JavaScript obfuscation score (high entropy, base64 encoding)
Moderate brand impersonation detection without corroborating evidence
Safety Factors
Long‑standing domain registration (over 19 years)
Absence of malicious IoC matches
No credential or payment collection forms
No network IDS alerts or malware YARA detections
Domain age information unavailable

Details

Page Title

Paint.NET - Free Software for Digital Photo Editing

Scan Type

public

Language

🇺🇸

English

(75% confidence)

Category

technology software

(78%)

Domain Information

The domain name 'www.getpaint.net' uses the network infrastructure generic top-level domain (.net) with subdomain 'www'. The core label 'getpaint' covers 8 characters containing three vowels alongside 5 consonants. Splitting it apart reveals two words: get, paint. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.getpaint.net/

Page Load Overview

2.92s
Total Load Time
42
HTTP Requests
9
Domains
644 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:75%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:75%
Script Type:Latin
Text Length:63,350 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
78%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7146.75.121.21United States
AS15169
750.87.184.106United States
AS46606Unified Layer
7104.19.184.109United States
AS13335Cloudflare, Inc.
7142.251.110.157United StatesUnknown
7142.251.151.119United StatesUnknown
7142.251.14.94United StatesUnknown
426--

Detected Technologies2

Bluehost
40%
DreamWeaver
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D762F8735B8C6C2E5601C18AF5A0ADAC4C4F5CBA97A1DCD9B43F3025F3C12D596292FA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:VF7D5ivDHelgvDHskO54nCm5U+2jmpRUQQQ1ZUmYQn66xaSn5Cd6ZPbUZNkOYzb:vEUr26xGb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15968:QYJygFJRCwgUglKDgKBIBB3ihiEgRRsDDFIiRGCASgYQQDNJFRNlEDQM5oOITBhBAaMQ+QFAzIIG5wBFpgaRIERlQwhVkQg4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7efc7c7c7f3ff
Perceptual Hash:b19bcc3033cccbcc
Difference Hash:9e161e9e9e9e1616
Wavelet Hash:c7c2c6c2c3c3c3c3
Color Hash:#6c77e0

Other Hashes

Crop Resistant:9e161e9e9e9e1616,6118be9cd8787933

Scan History

Scan history not available

Unable to load historical scan data