ScanMalware.com

Security Scan Report: lijianguang.pages.dev

Site favicon
Submitted: Dec 25, 2025, 8:05:35 PMCompleted: Dec 25, 2025, 8:07:22 PMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 4 countries across 15 domains to perform 52 HTTP transactions. The main domain is lijianguang.pages.dev and was registered NaN years ago.

Submitted URL: https://lijianguang.pages.dev/id

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Impersonates Ookla Speedtest on an untrusted domain; likely phishing.

Risk Factors
Brand impersonation of Ookla Speedtest on an untrusted Cloudflare Pages subdomain
Unranked domain presenting a well‑known brand without official affiliation
Potential social‑engineering via familiar brand name to lure users
Domain age information unavailable

Details

Page Title

Speedtest oleh Ookla - Uji Kecepatan Broadband Global

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

technology software

(57%)

Domain Information

The domain 'lijianguang.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'lijianguang'. The core label 'pages' covers 5 characters with two vowels and three consonants. Breaking it apart gives one word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lijianguang.pages.dev/id

Page Load Overview

7.38s
Total Load Time
142
HTTP Requests
52
Domains
3.4 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:2,403 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software57% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
57%
documentation technical
39%
government public service
28%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1623.36.162.25France
AS15169
957.129.85.132Frankfurt am Main, Hesse, Germany
AS16276OVH SAS
9104.18.86.42United States
AS13335CLOUDFLARENET
9172.66.47.181United States
AS13335CLOUDFLARENET
923.56.202.65Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
9172.217.18.10United Kingdom
AS44788
918.245.31.9Germany
AS16276
9146.75.122.219Unknown
AS396982
934.233.186.231Unknown
AS13335
93.214.230.65Unknown
AS62713
14215--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A91408F162B8536D908B879DAF36A618770FE0B7F99649D5B79D8B644B83CE0EC03404

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/xYnPkrYu4yWs0xE6J/CgbcVKzoKeMXKLnpI6dDcPXE+ymj6aslNzlbsjq0Aok31:CMsuybagbcVMaWUZD+3UbwnZiBsu9H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195393:QyBCUDGzSOhYRB2BKQqSIBqAaAI2BIQJJQxBMgZCIajsyJRE04RmbQACYSBwaSAQqBhBs8hSIIJgrLCgIoEQEYAqExOeoNES

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fb9ddfdfdfd1101
Perceptual Hash:aad533f10bd522d1
Difference Hash:9935353131352171
Wavelet Hash:7f3b1b1b3b3b0101
Color Hash:#aca953

Other Hashes

Crop Resistant:2d2d2d2d2c2d2ded,9935353131352171

Scan History

Scan history not available

Unable to load historical scan data