Security Scan Report: dyd-afl.pages.dev

Site favicon
Submitted: Jan 11, 2026, 3:48:06 AMCompleted: Jan 11, 2026, 3:50:42 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 8 domains to perform 30 HTTP transactions. The main domain is dyd-afl.pages.dev and was registered NaN years ago.

Submitted URL: https://dyd-afl.pages.dev/global-index/bulgaria

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Impersonates Speedtest brand on an unrelated domain; likely phishing.

Risk Factors
Brand impersonation on a non‑official domain
Unranked/low‑reputation domain presenting a major brand
Use of generic Cloudflare Pages subdomain (pages.dev) for brand content
Domain age information unavailable

Details

Page Title

Bulgaria's Mobile and Broadband Internet Speeds - Speedtest Global Index

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'dyd-afl.pages.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'dyd-afl'. Its registrable label 'pages' stretches across 5 characters split between two vowels and three consonants. Splitting it apart reveals 1 word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dyd-afl.pages.dev/global-index/bulgaria

Page Load Overview

90.11s
Total Load Time
30
HTTP Requests
8
Domains
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:4,074 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13172.66.44.144United States
AS13335CLOUDFLARENET
5104.18.86.42United States
AS13335CLOUDFLARENET
523.36.162.6United States
513.32.121.127United States
5104.16.5.65United StatesUnknown
3146.75.122.219United States
306--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DFF3D854E1B0032ED04A93CCF3627B8A110A71C7A94587F0F29D49715B83EEEBE5F56A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:W84krjjFBEySQDuVDyPmdUxp9O1RbNRBzRzKp9H1RbGRB8Rz9p9F1Rb2RB7RzfpG:lt1GQDI+0U/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:165332:EYUAiOxJSgWsngkwigIMCyEALS+EHBABMADApCKBfgqYNEcjuUgc0GAJs0DOjsCBIyDiArHCCYJIUDTYE5QKUDQTKBQFCJZG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:ac42022a47f9f1fd
Difference Hash:c5cd00163713372b
Wavelet Hash:0000dfd3c3c3c3ff
Color Hash:#4090bf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data