Security Scan Report: coral-fern-50df.pages.dev

Redirected to:
https://coral-fern-50df.pages.dev/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 2 domains to perform 57 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://coral-fern-50df.pages.dev/

Effective URL:
https://coral-fern-50df.pages.dev/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Content is a bandwidth test page with no forms, no data collection beyond the test itself, and only Cloudflare-owned endpoints contacted; brand claim on a pages.dev tenant is a naming quirk, not phishing evidence.

Risk Factors (1)
Brand name (Cloudflare) appears in title/meta on a non-canonical pages.dev tenant subdomain whose creation date cannot be determined
Safety Factors (5)
No credential, login, or payment form anywhere on the page
No cross-origin form submissions and no credential exfiltration detected
All contacted script/fetch endpoints belong to Cloudflare infrastructure
Content is a standard bandwidth-measurement page with privacy disclosure text and no urgent or deceptive calls to action
No Indicators of Compromise or JavaScript malware signatures in the scan
Domain age information unavailable

Details

Page Title

Internet Speed Test - Measure Network Performance | Cloudflare

Scan Type

public

Domain Name Analysis

Domain 'coral-fern-50df.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'coral-fern-50df'. The second-level label 'pages' is 5 characters long containing two vowels alongside three consonants. Segmentation suggests 1 word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://coral-fern-50df.pages.dev/

Page Load Overview

1.90s
Total Load Time
627 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,006 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.4.50Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.11.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
576--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D083B973C19261D9549BCFC862A8631C321AB205F07640F4AB796E7ADDC7EF315F4A88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Ciw4qOJm8dwnMgRJSmVcccccccccccccccccccc77777777766ZZZZZZZZggfffT:ClqmVcccccccccccccccccccc777777T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82176:jeBKKgAiIEBYiOAASrOQAogY5qVIAAAaWkCmEIBAcjhCicgYqEQoOB6IxHEKCBzwDJBprJFQrBmRlVQAQMCAsBDBgTBFIBQ0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8983c18183fbfffd
Perceptual Hash:bb3f86853b324b84
Difference Hash:79761b1b12230043
Wavelet Hash:8183818183fbffb9
Color Hash:#4e1f93

Other Hashes

Crop Resistant:79761b1b12230043

Scan History

Scan history not available

Unable to load historical scan data