Security Scan Report: coral-heron-e239-12c16dda.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 45 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://coral-heron-e239-12c16dda.pages.dev/ko-kr/about

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Korean-language page claiming to be Cloudflare's Speed Test on a random pages.dev subdomain. Brand claim is unverified, but there are no forms, no IoCs, no YARA hits and no phishing signals — a reference/clone risk, not confirmed phishing.

Risk Factors (3)
Unauthenticated Cloudflare branding, logo/title and copyright notice on a random-named pages.dev subdomain with no published link to Cloudflare
Shared hosting tenant subdomain with unknown actual creation date; unranked in Cisco Umbrella
Page text refers to itself by its own pages.dev hostname as the speed-test tool, a pattern also seen in cloned/rebranded copies of legitimate tools
Safety Factors (4)
No credential, password or payment forms present anywhere in the captured DOM
No cross-origin credential exfiltration and no suspicious JavaScript behaviour detected
No Indicators of Compromise, YARA malware hits, or phishing/malware network alerts
Content matches publicly documented Cloudflare Speed Test FAQ material and contains no urgency, lure or data-harvesting request
Domain age information unavailable

Details

Page Title

Cloudflare Speed Test 소개 | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'coral-heron-e239-12c16dda.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'coral-heron-e239-12c16dda'. Its registrable label 'pages' stretches across 5 characters holding 2 vowels versus three consonants. It segments into 1 word: pages. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://coral-heron-e239-12c16dda.pages.dev/ko-kr/about

Page Load Overview

1.21s
Total Load Time
316 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:80%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:ko-KR
Text Length:2,379 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.66.44.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11172.66.47.108Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
454--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B0E2E8723082D7FE32525A85B9E1B7B0D1C2A52BEB230060EF85CE475894AE7C583A75

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:LTbkxfHCPqRfs6XGTtwddZAac4avvnpYqTgrm4vffIuFTsRaABsh9g+ZyrZNJpLI:0fiPqRfnrkvnpJ4Hfd9g+ZYrIfPGY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31861:ERBCcwSIIoZdAvSBSqMzNBAIGLEAqCFUYMAFtCgcJqUcYoAAIAJhMSASAQMEoIF7CTAVgYLCESEghs8AmAk8mxSoCx1AJgog

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3dfcfc3c3c7c3
Perceptual Hash:b8cfc68c399e8c92
Difference Hash:320e2e1e16163e1e
Wavelet Hash:dec2c6c2c3c3c3c3
Color Hash:#1f5393

Other Hashes

Crop Resistant:320e2e1e16163e1e

Scan History

Scan history not available

Unable to load historical scan data