paymentsbusiness.ca - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned paymentsbusiness.ca and returned a unknown verdict (score 6). The page resolved to 64.71.34.150 on Ntirety, Inc. in US. The domain was registered 6210 days ago through DomainPeople, Inc.. 1 domain and 1 IP were contacted. 16 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://paymentsbusiness.ca/wp-content/plugins/formcraft/file-upload/server/content/files/16140cad3815b5---nakowagopoporiw.pdf - Domain: paymentsbusiness.ca · IP: 64.71.34.150 · AS18447 · US
- Server: Apache
- Page title: Payments Business
- HTTP status: 404 · text/html
- Registrar: DomainPeople, Inc. · domain age 6210 days · created 2009-08-21
- Registrant country: CA
- Evidenced operator: Lloydmedia, Inc
- Scan tier: fast · observed 2026-08-22 14:05:45 UTC
Malware communicating with this URL (16)
These samples were observed contacting or being served from paymentsbusiness.ca. Each links to its full analysis.
- Phishing - referenced ·
138794a98535e2343c3bc777c53bb332· first seen 2026-08-22 - Phishing - referenced ·
3e186e9efe69a8a640ac3af57accab8d· first seen 2026-08-22 - Phishing - referenced ·
b71aa78b8e3e6d0710b52cd0b9462c2d· first seen 2026-08-22 - Phishing - referenced ·
d36f87bbb08ab83612a247f3ae05f50c· first seen 2026-08-21 - Phishing - referenced ·
75dd4d95c40c6e04a8318692b320b844· first seen 2026-08-20 - Phishing - referenced ·
18cca7b98c5fef1e98564453f4ea1a4c· first seen 2026-08-16 - Phishing - referenced ·
1c32b1fac060d31088cb562762a59f86· first seen 2026-08-16 - Phishing - referenced ·
d6763853e09897cc4646bb02397b3260· first seen 2026-08-15 - Phishing - referenced ·
6b5cc3b6cd396fe4983fcc8c3b8adf19· first seen 2026-08-14 - Phishing - referenced ·
09dc09776e22eff7a3e0c1db8cfb5d15· first seen 2026-08-14 - Phishing - referenced ·
be874342155e095add30786c3d75800d· first seen 2026-08-14 - Phishing - referenced ·
982ac5f6109e0dd8162b4e20a3627cbe· first seen 2026-08-13 - Phishing - referenced ·
9602278ef37720173b5f8d69e819eff0· first seen 2026-08-13 - Phishing - referenced ·
c777e7f34d659b55cbe4eba2ddff1b26· first seen 2026-08-13 - Phishing - referenced ·
1a99c02acc405a88a3ccde14ffade030· first seen 2026-08-13
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Apache
Contacted infrastructure
- 64.71.34.150 - AS18447 Ntirety, Inc. (United States)
Observed indicators
- paymentsbusiness.ca
- 64.71.34.150
- http://paymentsbusiness.ca/wp-content/plugins/formcraft/file-upload/server/content/files/16140cad3815b5---nakowagopoporiw.pdf
Other scans of paymentsbusiness.ca (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 16 Aug 2026 - unknown ·
http://paymentsbusiness.ca/wp-content/plugins/formcraft/file-upload/server/content/files/160820fad7d - 14 Aug 2026 - unknown ·
http://paymentsbusiness.ca/wp-content/plugins/formcraft/file-upload/server/content/files/1607bce9294
Questions about paymentsbusiness.ca
- Is paymentsbusiness.ca safe?
- The scan of paymentsbusiness.ca on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with paymentsbusiness.ca?
- 16 analysed samples communicate with this URL, including Phishing.
- How was paymentsbusiness.ca checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of paymentsbusiness.ca
Scanned on MalwareAnalyzer by Cyble · Open interactive scan