ScanMalware.com

Security Scan Report: 9to5maccom.pages.dev

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/244b0b34-bf36-4596-af87-2075d7b0e48eDomain and IP registration (RDAP)/api/v1/rdap/244b0b34-bf36-4596-af87-2075d7b0e48eHow often this domain was scanned/api/v1/domain/stats/9to5maccom.pages.devScan history for this domain/api/v1/domain/history/9to5maccom.pages.dev?limit=15
This website contacted 38 IPs in 7 countries across 27 domains to perform 51 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://9to5maccom.pages.dev/post/money-cruncher-lottery-system/

AI Security Verdict

Low Risk

Confidence: 70%

3
Risk Score

Lookalike '9to5maccom' subdomain on pages.dev using the 9to5mac brand for scraped wallpaper SEO spam. No credential or malware payload, but the deceptive hostname warrants avoidance.

Risk Factors (4)
Typosquat-style hostname 9to5maccom.pages.dev mimicking the legitimate 9to5mac.com brand on infrastructure the real brand does not control
Brand name reused in page title, headers and OCR ('9TOSMACCOM') without authorisation
Keyword-stuffed, scraped SEO spam content over dozens of unrelated third-party image/wallpaper sources
Content served from a free hosting namespace (.pages.dev) where the subdomain has no verifiable age or accountable owner
Safety Factors (6)
No password, disguised-password or payment fields present (verified form facts: 0/0/0)
No JavaScript malware patterns detected by hunting rule and no native-hunting rule high-precision hits
No credential exfiltration or cross-origin credential form submissions detected
The only threat-intel match is a generic abuse-reputation tag on a third-party sub-resource address (104.247.81.99), not content malware on this page
Network IDS alerts are informational only (pages.dev TLS SNI/DNS and a .biz TLD query), not phishing or malware signatures
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

money cruncher lottery system Money wallpaper for mobile phone, tablet, desktop computer and other - 9to5maccom

Scan Type

public

Domain Name Analysis

The domain '9to5maccom.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain '9to5maccom'. Count 5 characters in 'pages' containing two vowels alongside three consonants. Word splitting yields one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

9TOSMACCOM 9TOSMACCOM money cruncher lottery system Money wallpaper for mobile phone, tablet, desktop computer and other September 04, 2024 [gj Uncategories If you are looking for 1920x1080px, 108...

Page Load Overview

80.11s
Total Load Time
9.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,362 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
56%
corporate business
44%
gambling betting
39%
news/blog
30%
government public service
26%

Detected Features

Search
Articles
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14172.66.47.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.44.235Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.77.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.20.45.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.75.120.84Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1104.247.81.99Canada
AS206834Team Internet AG
5138--

Detected Technologies5

Open-Graph-Protocolvarticle
100%
WordPress
75%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143C2F87FC5ACCC363E11ABE850507E7BE45A3D85EE6149D869EE62EC270DC5D4C32848

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CVx5jdOzEv6k86PNm32qPYiMKapqKMhdYVjuX7sLKqrk/SnGbZfjzgiE/1King4Q:0Ozu6+nGQKlMm0x3ag4v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26464:QIQ5BGQu+BkWaEBBjaIEMySJCEgYQJQACkaUAFEEsEQWQCRCbjcRQEsHARZVOIiGSxAugNFEAoAIYgnIlPYwhADAwh5VA2ZA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfcffbcfdf8787
Perceptual Hash:b0cd32cd65c6c93a
Difference Hash:301d16163a142d1d
Wavelet Hash:9f838b83838f8787
Color Hash:N/A

Other Hashes

Crop Resistant:301d16163a142d1d,584ccded2429697a

Scan History

Scan history not available

Unable to load historical scan data