Security Scan Report: paybytelegram.com

Submitted: Completed: publiccompleted
This website contacted 20 IPs in 2 countries across 15 domains to perform 18 HTTP transactions. The main domain is paybytelegram.com and was registered 1 year 3 months ago.

Submitted URL: https://paybytelegram.com/

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Domain flagged once (unverified) as phishing; hostname evokes the Telegram brand on a non-official domain. Page currently serves only a Cloudflare origin DNS error, so no forms were present to inspect. Treat as high-risk and avoid.

Risk Factors (3)
Single-source (uncorroborated) phishing report against the primary domain
Hostname combines a payment term with the 'telegram' brand on a non-official domain
No functional site content — visitors reach only a Cloudflare origin DNS error page
Domain age information unavailable

Details

Page Title

Origin DNS error | paybytelegram.com | Cloudflare

Scan Type

public

Domain Name Analysis

You're looking at domain 'paybytelegram.com' on the commercial generic top-level domain (.com) with no subdomain. Count 13 characters in 'paybytelegram' with 4 vowels and nine consonants. Tokenizing the label suggests 3 words: pay, by, telegram. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://paybytelegram.com/

Page Load Overview

0.36s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:932 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical73% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
73%
technology software
67%
government public service
60%
cryptocurrency blockchain
60%
news media journalism
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18172.67.148.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.39.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.66.0.102Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.28.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
023.194.190.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
035.190.26.57Google · CDNKansas City, Missouri, United States
AS396982Google LLC
0104.21.95.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.31.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.29.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1820--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B012B663F1F465390043C36676B9BB2D7D66A01B5BB108E57E5E42725F8EF82BD02388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lAa/Paahl2/zyzLwVgPpG9+nM3CeNws3s9YsNsMYCRLP9QAznY:2a/iy2UwVwM+nM3Cemi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9249:IBMBAw1IAElcAhBSQJJcxhSkEEgCAwRhQl8WQICSBEkAAogMzBh8AIEBDgCBKFwAC5IhEIYAAEmlAgI+GAGSmAQrppAg+Yyp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7cfcfcfcfc7e7ff
Perceptual Hash:b838c7741c673339
Difference Hash:1c341838380c0e00
Wavelet Hash:030f878f8b83c3d7
Color Hash:N/A

Other Hashes

Crop Resistant:1c341838380c0e00

Scan History

Scan history not available

Unable to load historical scan data