Security Scan Report: sunny-fox-50cb-8c7896ec.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 2 domains to perform 55 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://sunny-fox-50cb-8c7896ec.pages.dev/

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Cloudflare-branded speed test deployed on a pages.dev subdomain. No forms, no credential or payment collection, no threat-intel, YARA or IDS corroboration; IDS alerts are informational platform notices. Mild branding/host mismatch only.

Risk Factors (2)
Cloudflare branding presented on an unranked, unknown-age pages.dev subdomain rather than the official speed.cloudflare.com host
Shaded platform subdomain whose creation date cannot be verified
Safety Factors (5)
No credential, login or payment form anywhere on the page
No Indicators of Compromise or malware detections in threat intelligence or JavaScript scans
Content matches the behaviour of a real speed-test utility (measurement output, privacy disclosure, ASN/IP display)
No cross-origin credential exfiltration or suspicious form actions
The only IDS alerts are informational Cloudflare Pages platform notices and a generic obfuscated-JS heuristic
Domain age information unavailable

Details

Page Title

Internet Speed Test - Measure Network Performance | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'sunny-fox-50cb-8c7896ec.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'sunny-fox-50cb-8c7896ec'. The core label 'pages' covers 5 characters containing two vowels alongside three consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sunny-fox-50cb-8c7896ec.pages.dev/

Page Load Overview

1.46s
Total Load Time
545 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,006 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.4.50Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.11.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
556--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F83B873D19221D9549BCF8862A4631C321AB205F07740F4AB796E76DDC7EF325F4A88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ni+4qOJm8dwnMgRJSmVcccccccccccccccccccc77777777766ZZZZZZZZggfffH:nbqmVcccccccccccccccccccc777777H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82336:TEnZKRFVqGAASCOrAiECYwIoIIhRQAIKhADgi8BmaLhKkZhTOKYZAAGhxAAAgBS8DGlhzcgQ6JiBmrMCiMBDhIBGlhRDBMYU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8983c18183fbfffd
Perceptual Hash:bb3f86853b324b84
Difference Hash:79761b1b12230043
Wavelet Hash:8183818183fbffb9
Color Hash:#693a78

Other Hashes

Crop Resistant:79761b1b12230043

Scan History

Scan history not available

Unable to load historical scan data