ScanMalware.com

Security Scan Report: frosty-pine-b3f9.pages.dev

Redirected to:
https://frosty-pine-b3f9.pages.dev/install
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/04accfcc-5649-4e0f-8623-b45a31214397Domain and IP registration (RDAP)/api/v1/rdap/04accfcc-5649-4e0f-8623-b45a31214397How often this domain was scanned/api/v1/domain/stats/frosty-pine-b3f9.pages.devScan history for this domain/api/v1/domain/history/frosty-pine-b3f9.pages.dev?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://frosty-pine-b3f9.pages.dev/ja-jp/about

Effective URL:
https://frosty-pine-b3f9.pages.dev/install
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Self-hosted Nova Proxy / Cloudflare Worker panel setup page; no phishing, malware or brand impersonation, but it publishes proxy/VPN tooling that advises evading platform detection on an unknown-age free subdomain.

Risk Factors (3)
Proxy/VPN tunneling panel distributed via a free hosting subdomain of unknown age
Content coaches users on evading platform detection/blocking of proxy Workers
Password field present without an accompanying username field (typical of the panel's own admin-password setup, but noted)
Safety Factors (6)
No Indicators of Compromise matches against the page or its resources
No JavaScript malware (YARA) patterns and no obfuscated JS with a network sink
No cross-origin form submissions and no credential exfiltration detected
Only MEDIUM informational Suricata alerts about pages.dev, no phishing/malware IDS signature
Content itself instructs users to use Cloudflare's official review/appeal process rather than bypass restrictions
No brand impersonation — the site presents only its own 'Nova Proxy' name
Domain age information unavailable

Details

Page Title

Setup

Scan Type

public

Domain Name Analysis

You're looking at domain 'frosty-pine-b3f9.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'frosty-pine-b3f9'. The core label 'pages' covers 5 characters split between two vowels and three consonants. It segments into one word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://frosty-pine-b3f9.pages.dev/ja-jp/about

Page Load Overview

0.92s
Total Load Time
116 KB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa
Text Length:4,030 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software95% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
95%
documentation technical
81%
cryptocurrency blockchain
80%
education learning
74%
gambling betting
73%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
72--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T100033CF13364943A2727D095B082B72C7BB3AD36E34AD650DDB5572C14DBEB38301A69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:TUUrQg//wOYYKzXYrBxGwS1fHbFX+2UEd:Tn//wOYYKzXYrBxGwS1fbB+2L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41253:FAyEuBYShCBAAIAgxkkHAAUCQMoOwYGwGRYIIAEIgFCE1EUGjKAdIAFhZWgEAVQUCBRMJICriZg4iZIFIAhRgCNARQyTQgAO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c2faa2fbe3b3ffff
Perceptual Hash:e475992131cc6677
Difference Hash:16266c244c643230
Wavelet Hash:0038203923233b3f
Color Hash:#bf9540

Other Hashes

Crop Resistant:16266c244c643230

Scan History

Scan history not available

Unable to load historical scan data