DANGEROUS

Cracked-software site — high malware risk

Fake Microsoft Paint 3D download site using a 1.1-year-old domain and no official authorization. Cracks, keygens, activators, and "pre-activated" downloads are the single most common way people get infected — the crack itself is very often an infostealer, ransomware, or miner. No antivirus can make a pirated installer safe. Don't download or run anything from here; use the official or a free legitimate alternative.

Security Review

Is paint-3d.com legit or a scam?

Yes — this site is dangerous. Avoid it.

Do this now:close this page. Don't enter passwords or card details, and don't download anything.

Fake Microsoft Paint 3D download site using a 1.1-year-old domain and no official authorization.

Cross-checked against 9 independent sources 2 raised a concern
Open-web research was partially available; the verdict uses the other completed checks.
paint-3d.comScanned Jul 14, 2026
20/100
Trust score
0 = danger · 100 = safe
DANGEROUS
Score breakdown
Heuristics 36·MT 20
Category tags
softwaremalwareHow sure we are: High
Technical red flags (2)
Scam-network signals (65/100)Typosquat of microsoft.com
Positive signals (5)
Antivirus clearNot on major blacklistsDomain is 1.1 years oldEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

What this means for you

You were probably about to download cracked or 'pre-activated' software.

The 'crack' that unlocks it is one of the most common ways people get infected — often an infostealer or ransomware. No antivirus makes a pirated installer safe.

At a glance

The most useful evidence from this scan, separated from the final verdict so you can judge the signals yourself.

9 checks completed
Antivirus engines
0/92
No engine flagged this URL
Domain Age
1.1 years old
Registered Jun 24, 2025
Browser blocklists
Clear
No Google Safe Browsing warning
Encryption
Valid
TLS TLSv1.3
Visual inspection
85/100
Visual risk score
Open-web research
Partial
Only validated claims are shown

Website Preview

Intelligence

Advanced threat intelligence
Analysis
High scam likelihoodengineMT · Guardiantrust20/100
MT AgentLive web researchVisual inspectionNetwork correlation
85%
Confidence
The page presents itself as the official source for a discontinued Microsoft application and urges visitors to download the software. Visual analysis shows impersonation of Microsoft branding combined with a high-pressure download button and no legitimate corporate contact details. Our sandbox and antivirus engines did not flag the payload itself, yet the site matches known clone and typosquat patterns of microsoft.com. Two external reports explicitly state the site is an unauthorized third-party distributor and advise against downloading. The combination of impersonation, lack of business registration, and direct warnings from community sources outweighs the clean automated scan results.
Risk Factors
5
  • Site impersonates Microsoft branding to distribute discontinued software.
  • Domain is only 1.1 years old with no business registration on file.
  • Two independent sources explicitly warn the site is unauthorized by Microsoft.
  • High-pressure "Free Download" button is the primary call-to-action.
  • No contact email or phone number listed anywhere on the page.
Positive Signals
3
  • Zero detections from our antivirus network across 92 engines.
  • Hosting IP shows zero abuse reports.
  • Valid SSL certificate issued by Google Trust Services.
The full analysis

Page Content

The site claims to offer the official Microsoft Paint 3D application that was discontinued from the Microsoft Store in August 2024. It uses Microsoft-style headings and promises a free download while providing no verifiable contact email or phone number. The page loads external scripts from clarity.ms, googletagmanager.com, and facebook.com but contains no security seals or official Microsoft verification badges.

Infrastructure

The domain resolves to IP 104.21.81.125 with an abuse score of 0/100 and no prior abuse reports. SSL is issued by Google Trust Services and remains valid for 78 days. One redirect hop occurs within the same domain. External resources include microsoft.com, x.com, and cdn-icons-png.flaticon.com.

Domain History

The domain paint-3d.com was registered on 2025-06-24 through Spaceship, Inc. and is 1.1 years old. WHOIS privacy protection is disabled, yet no business registration records were located for the operator. The domain is flagged as a typosquat of microsoft.com.

Web Reputation

Two scam reports were located. A Reddit thread states the site is an unofficial third-party source and explicitly warns users not to download. A second source at mypaint3d.com confirms Microsoft has not authorized any third-party site to distribute Paint 3D. No positive reviews or trust ratings were found on independent review aggregators.

What this means for you

Visitors risk downloading modified or bundled software from an unverified source. The site exploits the discontinuation of the official app to create urgency around an unofficial installer.

AI Recommendation
Do not download any files from this site. Obtain software only from official Microsoft channels or the Microsoft Store.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Domain Timeline

Threat Detection

Scam Network

Cross-site correlation

This site shares signals with a broader cluster

Critical cluster

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
65/100
ClearLowModerateHighCritical
Evidence (2)
  • Evidence confirms this site is a clone of microsoft.com.
  • Domain is a typosquat of microsoft.com.
Linked signals (2)
Clone of microsoft.comTyposquat of microsoft.com

Antivirus Engines

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

2 of 21 categories showed signals

We check every URL against 21 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Cracked Software — Malware Risk
Cracked Software — Malware Risk
High likelihood
83/100
  • Tagged as a cracked-software / warez site.
  • Crack / keygen / activator language.
Brand Impersonation
Moderate likelihood
35/100
  • Domain is a typosquat of microsoft.com.
  • AI analyst tagged this as a brand / clone-site impersonation.

Technical Details

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressPresent
Linked social profiles4
Signal Summary
Contact details look reasonable
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • Postal address visible on the page.
  • Links to 4 social profiles.

Domain & Encryption

Domain History
Age1.1 years old
RegistrarSpaceship, Inc.
RegisteredJun 24, 2025
ExpiresJun 24, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 30, 2026 (78d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
Platform / CMSWordPress

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://paint-3d.com/
  • 2200https://paint-3d.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

What to do

Safer Alternatives

Final Verdict

20
Trust / 100
Final Verdict·paint-3d.com
DANGEROUS

Why we rated paint-3d.com dangerous

This site impersonates Microsoft Paint 3D to push unofficial downloads. The domain is only 1.1 years old, carries no business registration, and two independent sources already warn it is not authorized by Microsoft.

Do not download any files from this site. Obtain software only from official Microsoft channels or the Microsoft Store.

AV engines
92
Domain age
1.1 yrs
Flagged
0
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.