Security Scan Report: proxy-test-001.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 33 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://proxy-test-001.pages.dev/content/dam/edam/applecare/images/en_us/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Clone of Apple's Support site served from an unrelated pages.dev subdomain, copying Apple branding and URL paths; a single-source phishing report on the domain corroborates the impersonation. No credential form captured, but do not enter data or follow its links.

Risk Factors (4)
Impersonation of a different entity's brand (Apple) on a domain Apple does not own
Phishing indicator on the primary domain (single-source community submission)
Deceptive URL path mimicking Apple's genuine content-management structure
Untrusted shared-hosting subdomain with unknown creation date
Domain age information unavailable

Details

Page Title

Official Apple Support

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'proxy-test-001.pages.dev' is registered; it also runs on subdomain 'proxy-test-001'. Its registrable label 'pages' stretches across 5 characters with 2 vowels and 3 consonants. Tokenizing the label suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://proxy-test-001.pages.dev/content/dam/edam/applecare/images/en_us/

Page Load Overview

8.13s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,903 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software69% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
69%
finance banking
45%
education learning
45%
corporate business
41%
corporate
35%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
423.53.42.40Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
423.222.81.54Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
423.37.193.47Akamai · CDNBerlin, State of Berlin, Germany
AS16625Akamai Technologies, Inc.
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
423.53.42.41Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
417.8.130.144United States
AS714Apple Inc.
337--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12424E67E21A0102EA287CFCEEC1DBB14D516922ADEDD54C9B9BD47323756F91B0A7C08

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hcoV6B+IbOEtFXxWzaiQgjs1Om5tIF8xUlOLRlycwc0Ja+kyWoAgxxaMRop0ViPs:hcoV6B+IbOEtFXxWzrh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:221276:DA4UQBSCISNYIYxiEiKKu4i8C4IqELRoDQAATTdJRKAhSAhiEMAGhCBYEGllwRFFySwBgDBBgkF0CFAoAEtGlEIRESREBFcV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e6ffe7e7ffc3c3e7
Perceptual Hash:f7d755cc8e322222
Difference Hash:0e004d0e32060e0c
Wavelet Hash:00e6e7c3c3c3c1e7
Color Hash:#e06c7f

Other Hashes

Crop Resistant:0e004d0e32060e0c

Scan History

Scan history not available

Unable to load historical scan data