ScanMalware.com

Security Scan Report: fakegooglepages.pages.dev

Site favicon
Submitted: Sep 25, 2026, 9:36:54 AMCompleted: Sep 25, 2026, 9:38:55 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5a6cd9e1-d90c-42d3-b0d5-5844719ed64cDomain and IP registration (RDAP)/api/v1/rdap/5a6cd9e1-d90c-42d3-b0d5-5844719ed64cCertificate Transparency/api/v1/ct/fakegooglepages.pages.devHow often this domain was scanned/api/v1/domain/stats/fakegooglepages.pages.devScan history for this domain/api/v1/domain/history/fakegooglepages.pages.dev?limit=15

This website contacted 5 IPs in 1 country across 4 domains to perform 5678 HTTP transactions. The main domain is fakegooglepages.pages.dev and was registered 18 years ago.

Submitted URL: https://fakegooglepages.pages.dev/Google_files/rs=AA2YrTvWa3UbsHIsLGQE6majaDnj5RSDTw

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Fake Google page on fakegooglepages.pages.dev serving Google's favicon, title and search UI on a non-Google host — clear brand impersonation. No credential-capture form observed, but avoid interaction.

Risk Factors (4)
Brand impersonation of Google on an unrelated, non-official domain
Deceptive hostname containing 'fakegooglepages'
Google favicon served from a non-Google host
Unknown-age subdomain on shared hosting platform (pages.dev)
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

You're looking at domain 'fakegooglepages.pages.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'fakegooglepages'. The second-level label 'pages' is 5 characters long containing two vowels alongside three consonants. Segmentation suggests one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fakegooglepages.pages.dev/Google_files/rs=AA2YrTvWa3UbsHIsLGQE6majaDnj5RSDTw

Page Load Overview

81.40s
Total Load Time
41.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:236 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business73% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
73%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1138172.66.44.106Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1135142.251.13.132Google · CDNUnited States
AS15169Google LLC
1135172.66.47.150Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1135104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1135142.251.20.94Google · CDNUnited States
AS15169Google LLC
56785--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17BD229BBB710743746A3E671612F610A3D73602BB94C845871A8D4F07CB5D8A84A7FFA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:91oc6qfDef6/5/toUSSs6WPhgmIaLiZ4sbJsb/:zoF1Tgmgq/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28516:ABVEiUQJgzPBQVI6EUCjsSQs0HgAKw1QAQgVKikRCwlCwiEATypgAWEAoAJYGhEGzCEiZloLBSAqhFOFGGRlgh+AYAqIA2sP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffe7e7efffff00
Perceptual Hash:a6f619d909e426f2
Difference Hash:00080c0c080000c0
Wavelet Hash:f0f1c3c3c0c0ff00
Color Hash:#79d2b2

Other Hashes

Crop Resistant:00080c0c080000c0

Scan History

Scan history not available

Unable to load historical scan data