ScanMalware.com

Security Scan Report: pay.zippay.cc

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b8eb4d7d-98d4-45fc-88bb-87eeb70ddb5aDomain and IP registration (RDAP)/api/v1/rdap/b8eb4d7d-98d4-45fc-88bb-87eeb70ddb5aHow often this domain was scanned/api/v1/domain/stats/pay.zippay.ccScan history for this domain/api/v1/domain/history/pay.zippay.cc?limit=15
This website contacted 5 IPs in 3 countries across 2 domains to perform 36 HTTP transactions. The main domain is zippay.cc and was registered 4 months ago.

Submitted URL: https://pay.zippay.cc/

AI Security Verdict

High Risk

Confidence: 64%

7
Risk Score

Self-branded crypto payment gateway with no forms or malicious code, but its primary domain carries an unverified single-source phishing report and no independent reputation — treat with strong caution.

Risk Factors (3)
Threat-intelligence phishing report against the primary domain (single-source, uncorroborated)
Crypto payment/invoice gateway on a ~4-month-old domain making unverifiable corporate claims (Finnish registration 2025, Helsinki address, Telegram-only support)
Only self-asserted trust signals on the page; no independent verification available
Domain age information unavailable

Details

Page Title

ZipPay.cc — Accept crypto payments in minutes

Scan Type

public

Domain Name Analysis

You're looking at domain 'pay.zippay.cc' on the .cc country-code top-level domain, featuring subdomain 'pay'. Its registrable label 'zippay' stretches across 6 characters with 2 vowels and four consonants. Segmentation suggests 2 words: zip, pay. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pay.zippay.cc/

Page Load Overview

0.90s
Total Load Time
873 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,939 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business70% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
70%
cryptocurrency blockchain
62%
e-commerce shopping
45%
finance banking
38%
technology software
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
845.14.247.135Helsinki, Uusimaa, Finland
AS41745Baykov Ilya Sergeevich
745.14.247.58Helsinki, Uusimaa, Finland
AS41745Baykov Ilya Sergeevich
7104.21.58.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.197.50Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7185.166.152.155Cyprus
AS212171Local NCC Ltd.
365--

Detected Technologies4

Nuxt.js
50%
Node.js
50%
HSTS
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T113D26023B15418375137C7CDE7A1BE18A0A2F3ABDB4E1890C5EA192D5ED3FF13816168

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:LaZh5WRIzI0dSXUDGs7kegVWeodZzDMtSXUDGs7kegVWerOJoEO/q2oRdSXUDGs6:ZEIKe+CeroolGeVYYRme

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28783:YOJlWIIjZwAIoIPLQIAyFAigOVkGgBDNckEf2FQCEJEimASCEpgBwYQIBBIKmDI4AkBxhAEGikCE37AcR4AAIACHH5IAdZAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f99f8d9d9d99c1c9
Perceptual Hash:b819e3c7c3383c39
Difference Hash:3333353131331b3b
Wavelet Hash:b999851d8d91c1f9
Color Hash:#35d22d

Other Hashes

Crop Resistant:3333353131331b3b

Scan History

Scan history not available

Unable to load historical scan data