Security Scan Report: paywalletsecure.netlify.app

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 4 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://paywalletsecure.netlify.app/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

The site impersonates PayPal and harvests login credentials on an unranked Netlify subdomain, indicating a high‑risk phishing page.

Risk Factors (4)
Brand impersonation of PayPal
Credential harvesting form
Hosted on a free subdomain (netlify.app) with unknown age
Unranked domain in reputation databases
Domain age information unavailable

Details

Page Title

PayPal Login

Scan Type

public

Domain Name Analysis

The domain name 'paywalletsecure.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'paywalletsecure'. Count 7 characters in 'netlify' with 2 vowels and 5 consonants. Breaking it apart gives three words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://paywalletsecure.netlify.app/

Page Load Overview

0.65s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:175 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking51% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
51%
e-commerce shopping
49%
technology software
38%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.184.109Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FCD1659B65F704417943A0B43BBB6B163665D003990FCD383F9C53988F96E8A56A378C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:wouyptRgiuyFsGaQk9izM/6rT9igF9J3ls1caJ:VkJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6258:GJgBQQDGEgw4gAIAEMIgWpEkJhDCBMUUFoBFCAZDiFAqaAioAYkIAwgjEAIQEFQAcExEhAKKgTAQCqIAjCUMcAIDCECEQ/QD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00181819191b1b07
Perceptual Hash:8859336673d9cc66
Difference Hash:fff3b3b3b3b3f3ff
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:#1f9370

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data