Security Scan Report: paxum-spa-5067-preview.pages.dev

Redirected to:
https://paxum-spa-5067-preview.pages.dev/
Submitted: Nov 13, 2025, 11:58:51 AMCompleted: Nov 13, 2025, 11:59:41 AMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 0 countries across 3 domains to perform 83 HTTP transactions. The main domain is paxum-spa-5067-preview.pages.dev.

Submitted URL: http://paxum-spa-5067-preview.pages.dev/

Effective URL: https://paxum-spa-5067-preview.pages.dev/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Site is a high‑risk phishing page impersonating Paxum and harvesting credentials.

Risk Factors
Credential harvesting form on a newly registered, unranked domain
Brand impersonation of Paxum on a non‑official domain
Domain age unknown but likely <7 days, meeting criteria for critical new‑domain risk
Domain age information unavailable

Details

Page Title

Paxum. Pay with ease

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(41%)

Domain Information

The domain 'paxum-spa-5067-preview.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'paxum-spa-5067-preview'. The second-level label 'pages' is 5 characters long with two vowels and 3 consonants. Segmentation suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://paxum-spa-5067-preview.pages.dev/

Page Load Overview

20.45s
Total Load Time
83
HTTP Requests
3
Domains
27 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,208 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking41% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
41%
technology software
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11172.66.44.101UnknownUnknown
9172.66.47.155UnknownUnknown
9107.178.240.159UnknownUnknown
982.221.74.69UnknownUnknown
935.190.25.25UnknownUnknown
935.186.241.51UnknownUnknown
92606:4700:310c::ac42:2c65UnknownUnknown
92606:4700:310c::ac42:2f9bUnknownUnknown
9130.211.34.183UnknownUnknown
839--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B1F23AA1F8182C5D1B378BC0F8D67CC5A64E730FC186C454EA9E51F88ED3DA4B9A9439

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:YcZCxpanrh5HPIEAXXMSqFga0r5To1J0D/89Hyvp0dsvrEoFZdfuYqCI:VQxyHPIEAXXMSN/lzuYqCI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35810:AhIQuABSDMkwgUgJgIahFFsCOhjhj4CCMEKlUL4LcZQBIchRtVAEyCABQCCMZESZilAIOhiMNQAlJFABhAuSQAIQEkAdQqg2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff002070200000ff
Perceptual Hash:87c3b838c7c7b838
Difference Hash:e7b9c8cccce4e7e7
Wavelet Hash:ff0c2e72762000ff
Color Hash:#7982d2

Scan History

Scan history not available

Unable to load historical scan data