Security Scan Report: heathersummers-co.pages.dev

Redirected to:
https://x.com/thelu2hot
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 10 domains to perform 232 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://heathersummers-co.pages.dev/go/x

Effective URL:
https://x.com/thelu2hot
Redirected

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

This disposable or newly registered address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Risk Factors (1)
Entry host is an anonymous pages.dev subdomain of unknown creation date acting as a redirector — its provenance cannot be verified from this scan
Safety Factors (2)
Redirect terminates on the official x.com domain with the site's own (X) branding and login flow
Referenced third-party script hosts are top-1M ranked, well-known domains
Domain age information unavailable

Details

Page Title

Lu2hot (@thelu2hot) / X

Scan Type

public

Domain Name Analysis

You're looking at domain 'heathersummers-co.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'heathersummers-co'. Its registrable label 'pages' stretches across 5 characters with two vowels and three consonants. Segmentation suggests 1 word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://heathersummers-co.pages.dev/go/x

Page Load Overview

3.93s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,037 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business35% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
35%
social_media
30%

Detected Features

OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25146.75.120.159Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2534.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
25162.159.140.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25142.251.127.84Google · CDNUnited States
AS15169Google LLC
252.16.168.53Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
252.20.245.178Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
25142.251.14.139Google · CDNUnited States
AS15169Google LLC
2329--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AAD34F1F743E5E2A861B7943D1A9625C50C6BF4FCF20C9F0999B05625EC6FB938B1328

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:5jRVRLKx/c64Jysq7v1hpBZz4eBplvWL7LeeeeOhe6de+ee+XKAmDyibl502C/4W:5jRVRLshpBZj/lvWLiNBEXKZDJC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:134977:SBkxs1XQpoTCTIgZA6BgiRIGSBogFdHAQNopQUvoUEoVIIAEMaEgCjI4gEiiojCWRggLJIOCC5kyQkYjBgUJxZ4QMwJAYJAl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data