Security Scan Report: fseryy.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 76 IPs in 7 countries across 50 domains to perform 165 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://fseryy.pages.dev/registries?ref_=nav_cs_registry

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Unauthorized Amazon clone on a free pages.dev subdomain, reproducing Amazon branding, navigation and sign-in prompts; a sibling URL on the same host is reported as phishing. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Amazon on an unrelated shared-hosting subdomain
Single-source phishing report against a sibling URL on the same host
Search/navigation forms submit to the impersonating host rather than amazon.com
Unknown page age behind a free instant-publishing platform (pages.dev)
Amazon sign-in links injected into a page not served by Amazon
Domain age information unavailable

Details

Page Title

Amazon Registry & Gifting

Scan Type

public

Domain Name Analysis

The domain 'fseryy.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'fseryy'. The second-level label 'pages' is 5 characters long holding two vowels versus 3 consonants. It segments into 1 word: pages. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fseryy.pages.dev/registries?ref_=nav_cs_registry

Page Load Overview

3.12s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:6,556 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping44% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
44%
entertainment media
37%
documentation technical
28%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15172.66.47.198Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.161.80.122Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
254.174.136.39Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
244.215.139.172Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
22.19.198.202Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
218.173.205.79Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2108.138.2.48Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
244.215.137.166Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2172.66.44.58Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
223.32.238.33Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
16576--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D58439A5FDA02033117720BFD4BFA70E75B38743E9465980F5AC83942FA4D9A4627E6C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:K5r8g2laM2S/zHs4sjveQv8oua0yZWNI0UJG:Ar29M4s440jF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:400627:QZcBiDAcLfF4UE4yECQysIOhkRVQEMrQhM4CSQoVSEQIFOlcxAAUzIAIImYAgzRCJCgHGACpQIEOAwJkOFrh8KDIYSABZGEH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f3c1ffffff8781
Perceptual Hash:fa4176c11653535b
Difference Hash:d8051d1b2a2b2f2f
Wavelet Hash:00a181dfffff8181
Color Hash:#79a4d2

Scan History

Scan history not available

Unable to load historical scan data