Security Report: neonion.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/49671713-139c-4416-b262-9989584a02e5 Domain and IP registration (RDAP)/api/v1/rdap/49671713-139c-4416-b262-9989584a02e5 Certificate Transparency/api/v1/ct/neonion.pages.dev How often this domain was scanned/api/v1/domain/stats/neonion.pages.dev Scan history for this domain/api/v1/domain/history/neonion.pages.dev?limit=15

This website contacted 6 IPs in 3 countries across 3 domains to perform 6 HTTP transactions. The main domain is neonion.pages.dev and was registered 16 years ago.

Submitted URL: https://neonion.pages.dev/hk.html

Effective URL:

https://neonion.pages.dev/hk

Redirected

AI Security Verdict

Low Risk

Confidence: 86%

Risk Score

Disposable pages.dev storefront that collects raw card number, expiry and CVC itself while imitating Bank of Georgia / TBC payment pages and routing 'orders' to Instagram. Classic fake-shop carding page — do not enter card details.

Risk Factors (5)

Raw card-number/CVC/expiry capture on a free shared-hosting subdomain (no PCI-compliant gateway)

In-page 'choose bank → enter card details → order received' flow mimicking Bank of Georgia / TBC Bank payment pages

Order fulfilment directs users to Instagram DM instead of any real order system

Unranked domain on pages.dev with unknown creation date (could have been created minutes ago)

Sale of Hello Kitty (Sanrio) branded merchandise with no authorization evidence

Safety Factors (5)

Site uses its own 'Neonion Store' brand matching its domain (self-branding, not impersonation of the storefront entity)

No JavaScript malware/YARA patterns detected

No cross-origin credential exfiltration detected in inline scripts

No password field present (fields are payment fields)

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 9 to 3

Domain age information unavailable

Details

Page Title

Hello Kitty Plushie - Neonion Store

Scan Type

public

Favicon Hash

MMH3: -527470084

MD5: c84feeb331867cd7eda17299434b0208

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'neonion.pages.dev' is registered with subdomain 'neonion'. The core label 'pages' covers 5 characters with 2 vowels and 3 consonants. Segmentation suggests 1 word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

80.07s

Total Load Time

277 KB

Total Size

Language Analysis

Primary Language

🇪🇪ET

Code: et

Confidence:45%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:282 chars

Detector Agreement:75%

Language mismatch: Declared as en but detected as et

Website Classification

Primary Category

finance banking92% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

92%

e-commerce shopping

79%

entertainment media

59%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	172.66.47.146Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.247.81.99	Canada	AS206834Team Internet AG
1	45.43.142.3	United Kingdom	AS16276OVH SAS
1	172.66.44.110Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.7	United Kingdom	AS16276OVH SAS
1	45.43.142.8	United Kingdom	AS16276OVH SAS
6	6	-	-