Security Scan Report: mathresources.pages.dev

Redirected to:
https://mathresources.pages.dev/#gs9up0/avksgy7s?v=qpfw46to659r
Site favicon
Submitted: Sep 19, 2026, 12:11:13 AMCompleted: Sep 19, 2026, 12:11:31 AMpubliccompleted

This website contacted 14 IPs in 1 country across 13 domains to perform 27 HTTP transactions. The main domain is mathresources.pages.dev and was registered 21 years ago.

Submitted URL: http://mathresources.pages.dev/

Effective URL:

https://mathresources.pages.dev/#gs9up0/avksgy7s?v=qpfw46to659r
Redirected

AI Security Verdict

Low Risk

Confidence: 58%

3
Risk Score

A school-styled 'Lunar Proxy' launcher with a tab-disguise feature aimed at evading network filters. No forms, credential harvesting, or malware evidence detected, but the evasion-oriented design warrants caution.

Risk Factors (3)
Proxy/filter-evasion tool with deliberate 'tab disguise' to hide its identity from monitoring
Hosted on free shared platform (.pages.dev) — actual page creation date unknown
Inline scripts contain encoding/decoding routines with no clear network sink
Safety Factors (6)
No credential, login, or payment forms on the page
No threat-intel Indicators of Compromise matches
No JavaScript malware or YARA detections
Third-party resources limited to reputable CDNs (jsdelivr, cloudflare, gstatic, Google)
Suricata alerts are ET INFO generic pages.dev activity, not phishing or malware signatures
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Classes

Scan Type

public

Domain Name Analysis

The domain name 'mathresources.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'mathresources'. The second-level label 'pages' is 5 characters long holding 2 vowels versus 3 consonants. Tokenizing the label suggests one word: pages. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://mathresources.pages.dev/

Page Load Overview

0.82s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,058 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical52% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
52%
technology software
39%
education learning
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14172.66.44.67Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.150.119Google · CDNUnited States
AS15169Google LLC
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.47.189Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1142.251.151.119Google · CDNUnited States
AS15169Google LLC
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
2714--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C193B736A2A611353027D99D2BB7AF483232F103F549C4183A9D76D04FFEA94EC675B4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kOqnfNdk5w7wurk3AGYPl7X2Huo5aCftxu/J5gc/Jcgf/JtglbOFh4Pba:kDnNwgv/J5gc/Jcgf/JtglCP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93006:GARlBwAkVCLAQQIbpGkUYiywqgj+IABIoBAQARFFIAJg0SHMAQ3Y0xCKghaCjElGWMiRKlZErDCIigaAQKJEgAEENHgJCERJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c0c48e1e0e1f1919
Perceptual Hash:98f26a6e99992726
Difference Hash:1b1d1c307cf3f3f3
Wavelet Hash:c1cd8e1e1f1f1919
Color Hash:#9fac53

Other Hashes

Crop Resistant:1b1d1c307cf3f3f3

Scan History

Scan history not available

Unable to load historical scan data