Security Scan Report: cthor2.pages.dev

Redirected to:
https://cthor2.pages.dev/
Site favicon
Submitted: May 8, 2026, 11:01:38 AMCompleted: May 8, 2026, 11:02:52 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is cthor2.pages.dev and was registered NaN years ago.

Submitted URL: http://cthor2.pages.dev/

Effective URL: https://cthor2.pages.dev/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

The site shows strong malicious signals (critical IDS alert, brand impersonation on an unranked subdomain) and is classified as high risk; avoid and report.

Risk Factors
Critical IDS malware alert indicating possible data exfiltration
Brand impersonation on an unranked domain (typosquatting)
Unknown subdomain age – could be brand new
Hosting platform subdomain (pages.dev) with no reputation
Presence of external domains (cloudflareinsights.com) without clear purpose
Domain age information unavailable

Details

Page Title

Index • cthor.me

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(59%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'cthor2.pages.dev' is registered with subdomain 'cthor2'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside 3 consonants. Tokenizing the label suggests 1 word: pages. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://cthor2.pages.dev/

Page Load Overview

0.53s
Total Load Time
12
HTTP Requests
3
Domains
104 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:807 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical59% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
59%
adult content
58%
technology software
38%
entertainment media
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.66.44.110United States
AS13335Cloudflare, Inc.
6104.16.80.73United States
AS13335Cloudflare, Inc.
122--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15E120F1720F5107B0377125E6F963B28BE5BA05B920DAE153A5C8B4D6F82A178D933CF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:PrKMfZbK7X7mp+9SKJQbUU13FwY+YI4baVlDmdOML4:P2NjCprEaX13Fw8I8vOs4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9757:PjigABwYHeAgIVhLwEAQLEEUEk6GAgU+gKAIiGET4IMyQIkGxDyBKkAAQhKjBGBBUaMOqEDQkH1EQAAoMDLEgWKwFIAAIBiC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8783838b83afe7ff
Perceptual Hash:b73dd232ccc2cc26
Difference Hash:2c3e56520a480c00
Wavelet Hash:a68282a0838fe7ff
Color Hash:#80ac53

Other Hashes

Crop Resistant:2c3e56520a480c00

Scan History

Scan history not available

Unable to load historical scan data