mass.report
Scan Intelligence Report0/100
low Risk
pindownloads.com
https://pindownloads.com/pinterest-image-downloader/
IP
172.67.142.168 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
453 days
HTTP
200 · 26.4s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
PinDownloads (Pinterest Image Downloader)
Unknownecommerce | technology | social_media · 7/19/2026
Summary
The page at pindownloads.com presents a Pinterest Image Downloader interface with branding and imagery closely matching Pinterest-related content. However, the domain pindownloads.com is not the official Pinterest domain, and visual branding appears to clone Pinterest imagery. The presence of a login form is not evident in static HTML, but numerous external scripts, trackers, and third-party resources are loaded, suggesting a cloning/monetization page rather than an official Pinterest storefront. Without definitive credential harvesting or explicit impersonation of a login workflow, this appears to be potential impersonation/cloned UI rather than confirmed first-party abuse, though strong brand-mimicking indicators exist in the visuals and page title.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸POST targets observed during capture: https://pindownloads.com/wp-content/plugins/litespeed-cache/guest.vary.php, https://www.google-analytics.com/g/collect?v=2&tid=G-Q69DD3P6R8>m=45je66f1v9223672964z89223669590za20gzb9223669590zd9223669590&_p=1781672895444&gcd=13l3l3l3l1l1&npa=0&dma=0&are=1&cid=307336805.1781672896&frm=0&pscdl=noapi&rcb=0&sr=1280x720&uaa=x86&uab=64&uafvl=Not%253AA-Brand%3B99.0.0.0%7CHeadlessChrome%3B145.0.7632.6%7CChromium%3B145.0.7632.6&uam=&uamb=0&uap=Windows&uapv=10.0&uaw=0&ul=en-us&_s=1&tag_exp=115938465~115938469~119392696~119392704~119456239~119456247&sid=1781672895&sct=1&seg=0&dl=https%3A%2F%2Fpindownloads.com%2Fpinterest-image-downloader%2F&dt=Pinterest%20Image%20Downloader%20%E2%80%93%20Download%20Images%20%26%20GIFs%20Free&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1992, https://pindownloads.com/cdn-cgi/rum?.
▸Distinctive asset clues: v833ccba57c9e4d2798f2e76cebdd09a11778172276447, gtm.js, 29278be1dac43689ecf37a8590c9b36c.css, 779296dcde6d3ff10b15d402f8bf2ee8.css, pinterest-image-downloader.webp, pindownloads-logo.png.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 1
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 81
Hosts: 15
Domains: 12
Suspicious Endpoints
hxxps://pindownloads[.]com/pinterest-image-downloader/
Attack Techniques (2)
Brand impersonation signals observed (Pinterest-like UI on a non-Pinterest domain).SPA-like behavior inferred from dynamic content and numerous external assets, potentially masking credential collection.
Indicators of Compromise (2)
▸Domain: pindownloads.com not owned by Pinterest, potential typosquat/brand clone.
▸One static GET HTML form present but no credentials captured in static HTML.
Risk AssessmentUsed in abuse reports
The evidence shows a clone-like Pinterest branding on a non-official domain with heavy reliance on third-party ads and analytics, which is a common pattern for deceptive or monetized clone sites. While there is no definitive credential harvesting observed in the static HTML, the combination of brand impersonation signals, external tracking, and high ad-tech content suggests a high potential for abuse in impersonation or phishing contexts if the UI is used to collect user input. The presence of a login form is not confirmed in static HTML, but SPA behavior could render one at runtime. Given the risk signals, this warrants close monitoring and potential takedown actions if impersonation is confirmed through further evidence.
Recommended Action
Monitor
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API