Security Scan Report: paypal.invoicesimple.com

Submitted: Mar 11, 2026, 8:16:26 AMCompleted: Mar 11, 2026, 8:18:07 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 8 HTTP transactions. The main domain is paypal.invoicesimple.com and was registered NaN years ago.

Submitted URL: https://paypal.invoicesimple.com

The Cisco Umbrella rank of the primary domain is #230,723 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Page mimics PayPal on a low‑rank subdomain; likely phishing – do not enter credentials and report.

Risk Factors
Brand impersonation on a non‑official PayPal subdomain
Low Cisco Umbrella ranking for a major brand
Login UI present without a functional form (suspicious credential collection attempt)
Domain age information unavailable

Details

Page Title

Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(83%)

Domain Information

You're looking at domain 'paypal.invoicesimple.com' on the commercial generic top-level domain (.com), featuring subdomain 'paypal'. The core label 'invoicesimple' covers 13 characters containing 6 vowels alongside seven consonants. Word splitting yields 3 words: in, voice, simple. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://paypal.invoicesimple.com

Page Load Overview

8.17s
Total Load Time
1
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:768 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software83% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
83%
documentation technical
62%
adult content
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.217.16.202United States
03.174.46.54United States
0142.251.140.163United States
065.9.175.4United States
03.5.133.194United States
15--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11251B75B25E258EC52839070ABEAB60A2F45C1634A81C450F8FCC5BC9FD5FC2C80B75E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:T2u6PpogtbPSYajrQQOVllA/lqCyjX1q5sVzwUnj28U8/:TTs6gtrvlA/lfEX1qc0uS6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3068:ABBAAEIIAxQIgAARIAAAEQASAgCEEEAABQgBBCAYJARACAgCQQGEABAAAAAAAAABAQIACAAEgwAgkGCEAAogEAABgkAAACIQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efdbe7a5dbe7ffff
Perceptual Hash:b333998c66666699
Difference Hash:08320c0c30080000
Wavelet Hash:243c28201f0f0f0f
Color Hash:#c5b787

Other Hashes

Crop Resistant:08320c0c30080000

Scan History

Scan history not available

Unable to load historical scan data