Security Scan Report: securecheckv1-proceed.pages.dev

Redirected to:
https://securecheckv1-proceed.pages.dev/?vid=d0ff0fdf888e&stamp=179249...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://securecheckv1-proceed.pages.dev/

Effective URL:
https://securecheckv1-proceed.pages.dev/?vid=d0ff0fdf888e&stamp=179249...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed clickfix/pastejacking malware page: a fake 'I'm not a robot' check tricking users into pasting a base64-encoded curl shell command into Terminal, tied to an exploit-kit-flagged domain. Do not interact — close immediately.

Risk Factors (5)
Clipboard injection of a shell command (paste-and-run malware lure)
Base64-encoded curl payload obfuscation staged to an exploit-kit-flagged domain
Fake 'I'm not a robot' / security-checkpoint social engineering to induce command execution
Threat-intel corroborated malicious domain association (exploit kit, clearfake-1)
Disposable Cloudflare Pages subdomain with no verifiable ownership or reputation
Domain age information unavailable

Details

Page Title

Secure Gateway • Quick Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'securecheckv1-proceed.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'securecheckv1-proceed'. The second-level label 'pages' is 5 characters long containing two vowels alongside three consonants. Splitting it apart reveals 1 word: pages. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://securecheckv1-proceed.pages.dev/

Page Load Overview

0.45s
Total Load Time
8 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:342 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software32% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.66.44.58Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.47.198Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E5424459AAB700567C1386A43FA7538523A0D007D806CE2D7FEE6794CF8D654BDA3B4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:LQnjntwB5n7bIqFAe/7BZtNXtwGVey1tmeydjuY0qx9KFruuZ6G1Iv/uy/01SCJd:8jtwBVzAA7pNXEdjArlGByRGbI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12148:FBnENSZhIIIZGSAkBdBQIOCqGRD1yAFRoAUFAEgx0AaQwERuCAQEIRQDBGrEEhFFBCCnVQKAASwRgGhMQkSEMzIAKAKEpWDw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f0f8ecf8988000
Perceptual Hash:d9b366cc9b3310cc
Difference Hash:0004105830300000
Wavelet Hash:fcf8f8e8f8d8c080
Color Hash:#8d53ac

Other Hashes

Crop Resistant:0004105830300000

Scan History

Scan history not available

Unable to load historical scan data