Security Scan Report: tetes-air.pages.dev

Submitted: Completed: publiccompleted
This website contacted 27 IPs in 2 countries across 17 domains to perform 226 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://tetes-air.pages.dev/dp/B0B6GK4VTC?ref=MarsFS_VICC_RINGINDC%2F

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Amazon-branded storefront cloned on a non-Amazon pages.dev host, layered with Indonesian slot-gambling spam and a tinyurl redirect; flagged as phishing by a single unverified feed. No credential form, but do not trust or interact.

Risk Factors (5)
Impersonation of Amazon branding and product layout on a non-Amazon, unranked pages.dev subdomain
Gambling promotion / illegal gambling content layered over the cloned brand page
Off-site redirect via tinyurl shortener in a form action
Threat-intel report of phishing on the primary domain (single-source, unverified)
DevTools and right-click blocking (anti-analysis behaviour)
Domain age information unavailable

Details

Page Title

SLOT QRIS X Agen Resmi Slot Gacor Bet 200 & RTP live Pasti Maxwin Hari Ini

Scan Type

public

Domain Name Analysis

The domain name 'tetes-air.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'tetes-air'. The second-level label 'pages' is 5 characters long with two vowels and 3 consonants. Breaking it apart gives one word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tetes-air.pages.dev/dp/B0B6GK4VTC?ref=MarsFS_VICC_RINGINDC%2F

Page Load Overview

9.79s
Total Load Time
5.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-au
Text Length:59,883 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting90% confidence
Type: webapp
Method: ml+structural

All Detected Categories

gambling betting
90%
entertainment media
83%
cryptocurrency blockchain
71%
social media network
61%
technology software
60%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
83.174.47.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
818.64.210.156Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8148.153.240.76United States
AS63199CDS Global Cloud Co., Ltd
8146.75.121.16Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
8184.33.227.182Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
818.246.97.199Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
8143.204.173.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
865.9.130.45Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
22627--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F075A529A8A270B76267D1A5444F652F94C2F3CB8249534C3D9C841C9FEB93D884FFAD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:xriawcUM9XrjlSohyoIrjlS30A/rjlS4v3ei52Q9R:xriawdZi52Q9R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1562834:6fAiECXINIQABZCEmUiYGKABJxIFSkJEAxRlonAgREKpBYE+BSGiGLAAMycbZB8vmQFOYcgAEtKpRCAakCASCQpgIDGVMDDN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f1fff3ffffff3f
Perceptual Hash:cf501f5017545f5a
Difference Hash:dc01052606002478
Wavelet Hash:0000f2f282ffff0f
Color Hash:#ac539f

Scan History

Scan history not available

Unable to load historical scan data