Security Scan Report: paypaloauth.wixstudio.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 14 HTTP transactions. The main domain is wixstudio.com and was registered 9 years ago.

Submitted URL: https://paypaloauth.wixstudio.com/

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Empty Wix Studio 404, but the hostname 'paypaloauth' impersonates a PayPal OAuth flow and the primary domain carries a single-source phishing report. Do not trust or reuse this URL.

Risk Factors (4)
Deceptive hostname imitating a PayPal OAuth flow on a non-PayPal domain
Single-source (unverified) phishing threat-intelligence match on the primary domain
Free/instant Wix Studio subdomain tenant — page age unknown and apex registration date not attributable to this page
Domain not ranked in Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

404 Error: Page Not Found | Wix Studioother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'paypaloauth.wixstudio.com' is registered and includes subdomain 'paypaloauth'. The registrable portion 'wixstudio' spans 9 characters containing 4 vowels alongside five consonants. Tokenizing the label suggests 3 words: wi, x, studio. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

O wxstupio Design Start Creating ERROR: PAGE NOT FOUND We can't find the page you're looking for. Go to the Wix Studio homepage >

Page Load Overview

0.45s
Total Load Time
374 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:217 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical37% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
37%
corporate business
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.66.3.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2162.159.143.12Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
254.164.30.32Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
265.8.131.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
235.168.31.55Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
146--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16112D6F20E00C16D024745C8BF23726C6A4FA0BEB9D688E178FD99892BC7ED5C95B520

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Y4l4U4bqYNrNAMFROeEGAY/Z+Uprh1l/x7vVYMX/0yX/4A/M1w4En85IR7/vl:Y4l4U4bqYdGtGfZHN7zcw4w85a7/vl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9072:JPXKEaZADESNeikAhUJWS+kKTzSjAAlAMgiCmQJChCByAIG8PHagJGEhAAFACIAGyxHiVnCgwAnrg6JEwBgAPvVQAgqEjJKR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data