Security Scan Report: 1004-crg.pages.dev

Submitted: Jan 20, 2026, 8:39:58 AMCompleted: Jan 20, 2026, 8:41:03 AMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 3 countries across 15 domains to perform 1 HTTP transaction. The main domain is 1004-crg.pages.dev and was registered NaN years ago.

Submitted URL: https://1004-crg.pages.dev/ru

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Site impersonates Ookla Speedtest on an unranked domain; high‑risk phishing.

Risk Factors
Brand impersonation/typosquatting (Speedtest brand on unrelated domain)
Unranked domain not associated with the official brand
Mismatch between final URL (1004-crg.pages.dev) and claimed brand (Ookla Speedtest)
Domain age information unavailable

Details

Page Title

Speedtest от Ookla - Глобальный тест скорости широкополосного доступа

Scan Type

public

Language

🇷🇺

Russian

(80% confidence)

Category

technology software

(73%)

Domain Information

Domain '1004-crg.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain '1004-crg'. The registrable portion 'pages' spans 5 characters holding two vowels versus three consonants. Segmentation suggests 1 word: pages. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1004-crg.pages.dev/ru

Page Load Overview

2.84s
Total Load Time
79
HTTP Requests
27
Domains
3.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:80%
Script Type:Cyrillic
HTML Lang Attribute:ru
Text Length:2,461 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software73% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
73%
government public service
48%
documentation technical
43%
corporate business
37%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9178.250.1.12France
AS44788Criteo Technology SAS
574.125.133.84United States
AS15169GOOGLE
5104.18.86.42United States
AS13335CLOUDFLARENET
544.195.221.242Ashburn, Virginia, United States
AS14618AMAZON-AES
534.120.133.55Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
5142.250.185.74Unknown
5146.75.122.219Frankfurt am Main, Hesse, Germany
AS54113FASTLY
5172.66.44.176United States
AS13335CLOUDFLARENET
513.226.244.99Unknown
523.56.202.65Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
7915--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E514F7F162B8535D908B979DEF36AA08770FE0B7F99A4AD5B79D4B644B83C90EC03404

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/lkbOmh4kles0xE6J/CgbcVKzoKeMXKLnpI6dDcPXE+ymj6aslNzlbsjq0Aok3Wj:WfXebagbcVMaWUZD+3UbwnZ8vu29m

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:194377:FcRDKMzmgShHwLAFJcNQQ0FoIWADAXEDRGMsSIDJKaFBG0gBQxLBbMSLBQSYEWQI8GEIaiEigQKIp1CQTQPXgkAhD0hA4Aea

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fb9ddfdbdfd0100
Perceptual Hash:aaf543b18b74c274
Difference Hash:9931353131252561
Wavelet Hash:7f3939393b3b0101
Color Hash:#d2902d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data