Security Scan Report: mobilepayy.online

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 5 domains to perform 21 HTTP transactions. The main domain is mobilepayy.online and was registered 1 week ago.

Submitted URL: https://mobilepayy.online/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Day-old mobilepayy.online impersonating 'Mobile Pay' runs a multi-step kit harvesting phone numbers, card number/expiry/CVV and SMS codes under a fake telecom bonus lure. Do not enter any data.

Risk Factors (5)
Brand impersonation of 'Mobile Pay' on an unrelated, day-old domain
Card data entry fields (number, expiry, CVV) plus SMS one-time-code capture on a non-official host
Password field present in a multi-stage flow with no cross-origin but no legitimate back end visible
Bonus/top-up lure language directed at telecom subscribers
Domain age 1 day, unranked reputation, two redirects
Domain age information unavailable

Details

Page Title

Mobile Pay

Scan Type

public

Domain Name Analysis

You're looking at domain 'mobilepayy.online' on the modern generic top-level domain (.online) and has no subdomain. The core label 'mobilepayy' covers 10 characters with 4 vowels and 6 consonants. Splitting it apart reveals three words: mobile, pay, y. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

ais Mobile Pay © Kampaniya aktivdir Bu gin size 6zel bonus kampaniyasi taqdim olunur e Operator BASLAYIN Operatoru secin Prefikslar avtomatik uygunlasdinlacaq, Oo Azercell o Bakcell 055 +...

Page Load Overview

2.47s
Total Load Time
773 KB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:az
Text Length:1,299 chars
Detector Agreement:67%
Language mismatch: Declared as az but detected as tr

Website Classification

Primary Category

finance banking90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
90%
documentation technical
83%
technology software
76%
adult content
67%
government public service
63%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
366.29.148.195United States
AS22612Namecheap, Inc.
3104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.127.94Google · CDNUnited States
AS15169Google LLC
3172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
217--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16073F82A71F3043A6C9386F9A7E3A7497669E143DD07CA59BB9C42408FC3ED18E93354

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:LwhhMbznNRtZcX672hnZ2zvK2Yow+WbQcuZ6RCYzOjpy41RshKCQzr:shhMbznNRtZcnhZ2zvK2Y0kQf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:76118:RQSmRLPAGBEZ5fOdSoQW4nIFYOChDYDxDAAoTNAAUKkdBCYKCAAElkSUBZcADAZ43gQoEYgpMAMNDJlNhCECdsrmmpUADYSh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c243c2cfcfefeee
Perceptual Hash:930226ddfbd98c8c
Difference Hash:e8e8e8d858101212
Wavelet Hash:1c001828fcfefeea
Color Hash:N/A

Other Hashes

Crop Resistant:e8e8e8d858101212

Scan History

Scan history not available

Unable to load historical scan data