0
Trust score
SUSPICIOUS
Heuristics 95·MT 42
Category tags
softwareutilities62% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
Registration date unknown
MT Intelligence
Suspicious
Moderate likelihood · 62% confidence
SUSPICIOUS

Warning signs detected

New Windows content-censorship app sold via Gumroad with no business registration, local AI claims, and online license re-verification every 3 days. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of pixelcage.app
LIVE RENDER
pixelcage.app

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust42/100
MT AgentLive web researchVisual inspection
0%
Confidence
PixelCage presents as a legitimate software product: clean antivirus scans, valid SSL, no malware detections, and a stated focus on local-only AI processing using the open-source NudeNet ONNX model. The Gumroad storefront shows a 5.0 rating with 2,000+ downloads since March 2026. However, several factors create moderate suspicion. The domain is only 35 days old with no business registration, company name, or legal entity details anywhere on the site or in public records. The developer, nilosoy, has no verifiable business presence beyond a Gumroad account and an X handle. Most significantly, despite claims of 100% local operation, the licensing system requires online re-verification every 3 days (with a 7-day offline grace period) — a pattern often seen in subscription-trap or license-lock schemes. No scam reports, complaints, or negative reviews exist in public sources, which is consistent with a genuinely new product but also typical of early-stage fraud operations before complaints accumulate.
Full dossier
Analysis complete

Page Content

The site presents a polished, feature-rich product page for PixelCage v1.2.2, a Windows application for real-time AI-based content censorship. The marketing emphasizes local-only operation (no cloud, no telemetry, no subscriptions), 30 FPS screen capture, sub-60ms latency, and multiple overlay modes (blackout, mosaic, haze, whiteout, custom). The page lists a 5.0 Gumroad rating with 2,000+ downloads. Contact is limited to support@pixelcage.app; no phone number, physical address, or business registration details are provided.

Infrastructure

Domain registered 35 days ago with valid Let's Encrypt SSL (35 days to expiry). Hosting IP 69.46.46.50 has zero abuse reports and a clean reputation score. The site loads external resources from Google Fonts and Tailwind CDN (standard practice) and links to nilosoy.gumroad.com for purchase. No redirects, homoglyphs, or IDN tricks detected. Not indexed in global traffic rankings.

Domain History

WHOIS data unavailable, preventing verification of registrant identity or registration date confirmation. The domain is extremely new (35 days), which is typical for legitimate indie software launches but also a hallmark of short-lived fraud operations. No historical reputation data available.

Web Reputation

Zero scam reports, complaints, or negative mentions found across web searches, Reddit, review aggregators, or consumer-complaint databases. No association with known scam families or malware. The Gumroad listing is the only independent verification point, showing a 5.0 rating. Absence of complaints is consistent with a genuinely new product but does not rule out early-stage fraud.

Risk Factors
7
  • Domain registered only 35 days ago with no business registration, company name, or legal entity details in public records.
  • Developer (nilosoy) has no verifiable business presence beyond Gumroad and an X account; no privacy policy, imprint, or terms of service on the site.
  • Licensing system requires online re-verification every 3 days despite claims of 100% local operation — a pattern consistent with subscription traps or license-lock schemes.
  • WHOIS data unavailable, preventing verification of registrant identity or ownership legitimacy.
  • No independent user reviews, testimonials, or third-party validation outside the Gumroad storefront.
  • Product niche (adult content censorship) and distribution model (Gumroad indie seller) create plausible deniability for rapid abandonment or bait-and-switch tactics.
  • SSL certificate expires in 35 days; renewal pattern will indicate operator commitment.
Positive Signals
5
  • Zero malware detections across our antivirus network (0/92 engines flagged).
  • Valid SSL certificate issued by Let's Encrypt with no certificate-chain anomalies.
  • Hosting IP has zero abuse reports and a clean reputation score.
  • Gumroad storefront shows 5.0 rating with 2,000+ downloads, suggesting real user adoption.
  • Product uses legitimate open-source NudeNet ONNX model; technical claims are verifiable and not obviously fraudulent.
AI Recommendation
Do not enter payment details unless you can verify the developer's identity and legitimacy independently. Before purchasing, confirm that the Gumroad storefront (nilosoy.gumroad.com/l/pixelcage) is the official sales channel, and review the 7-day refund policy carefully. Be aware that the licensing system requires online re-verification every 3 days; if the developer abandons the project, your lic
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for pixelcage.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
1 positive
Key findings
7 headline facts from open-web research
  • Domain promotes PixelCage, a Windows app that uses real-time local AI (NudeNet ONNX, 30 FPS screen capture, <60ms latency) to detect and overlay explicit content with transparent covers (blackout, mosaic, etc.).
  • Sold exclusively via Gumroad (nilosoy.gumroad.com/l/pixelcage) as one-time purchase with 7-day refund; license key delivered by email and re-verifies online every 3 days (7-day offline grace).
  • Site claims 5.0 rating on Gumroad with 2,000+ downloads since launch in March 2026; no independent reviews or user testimonials located.
  • Fully local operation emphasized: no cloud, no telemetry, no subscriptions, no screen uploads; contact is support@pixelcage.app.
  • No scam reports, complaints, malware mentions, or negative feedback found across web searches, Reddit, or review sites.
  • Developer identified as nilosoy (X: @nilo_soy89096); no business registration, privacy policy, or imprint details available on the site.
  • No evidence of association with known scam families; product niche (adult content censorship) matches the marketing with no red flags in available data.
Positive reviews (1)
Quotes indicating the site is legitimate.
  • pixelcage.app (Gumroad)open

    "★ ★ ★ ★ ★ 5.0 ON GUMROAD · 2,000+ DOWNLOADS"

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, Reddit, and general web sources for pixelcage.app and found zero scam reports, complaints, or negative mentions. The only independent verification point is the Gumroad storefront, which shows a 5.0 rating with 2,000+ downloads since the product's March 2026 launch. No business registration, legal entity details, or privacy policy were located in public records or on the site itself. For a brand-new indie software product distributed via Gumroad, the absence of complaints is expected and does not by itself indicate trust — it is consistent with both legitimate early-stage launches and early-stage fraud operations before user complaints accumulate.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious55Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has a contact email on its own domain
Emails on site's domainsupport@pixelcage.app
Phone numbersNone
Postal addressPresent
Linked social profiles0
Signal Summary
Contact details look reasonable
  • No phone number listed on the page.
  • Contact email on the site's own domain (support@pixelcage.app).
  • Postal address visible on the page.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · E8
ExpiresJul 21, 2026 (35d)
Self-signedNo
Hosting & Technology
HostingFusionTek
Server locationUS
Web serverrailway-hikari

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://pixelcage.app/
  • 2200https://pixelcage.app/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPFusionTek
Usage typeData Center/Web Hosting/Transit

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat pixelcage.app as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked pixelcage.app as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • pixelcage.app currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. pixelcage.app presents a valid TLSv1.3 certificate issued by Let's Encrypt · E8, expiring in 35 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 92 antivirus engines in our malware network report pixelcage.app as clean.
  • No. pixelcage.app is not currently listed on the major browser blocklist feeds that modern browsers use.
  • pixelcage.app resolves to an IP operated by FusionTek in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 16, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around pixelcage.app have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·pixelcage.app
SUSPICIOUS

PixelCage is a Windows app claiming to use local AI to detect and censor explicit content on-screen. The product itself shows no malware or scam indicators, but the operator lacks business registration, the domain is brand-new (35 days old), and the licensing model requires online re-verification every 3 days — raising questions about long-term reliability and the developer's legitimacy.

Do not enter payment details unless you can verify the developer's identity and legitimacy independently. Before purchasing, confirm that the Gumroad storefront (nilosoy.gumroad.com/l/pixelcage) is the official sales channel, and review the 7-day refund policy carefully. Be aware that the licensing system requires online re-verification every 3 days; if the developer abandons the project, your lic

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.