Security Scan Report: mestogo-blog.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 4 countries across 16 domains to perform 69 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://mestogo-blog.pages.dev/en/capsule-hotels-klia-malaysia/

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Legitimate travel blog article about KLIA capsule hotels on a Cloudflare Pages subdomain. No forms, no impersonation, no Indicators of Compromise or malware; ad-script redirects/eval only. Low risk.

Risk Factors (2)
Free hosting-platform subdomain (.pages.dev) whose actual creation date is unknown
6 cross-domain redirects and 5 eval() calls (consistent with ad/analytics scripts, but dynamic code execution noted)
Safety Factors (4)
No credential, password, or payment fields present
No Indicators of Compromise or YARA malware matches
og:type=article — brands named are reported on, not impersonated
Rich, coherent editorial content with related-article links and structured sections
Domain age information unavailable

Details

Page Title

3 Hours for RM135: The Sleep Hack That Changed My KLIA Layovers Forever | MestoGo

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'mestogo-blog.pages.dev' is registered and includes subdomain 'mestogo-blog'. Its registrable label 'pages' stretches across 5 characters with two vowels and three consonants. Tokenizing the label suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mestogo-blog.pages.dev/en/capsule-hotels-klia-malaysia/

Page Load Overview

2.09s
Total Load Time
11.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:13,867 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3142.251.20.154Google · CDNUnited States
AS15169Google LLC
3146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3142.251.13.97Google · CDNUnited States
AS15169Google LLC
387.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
3150.171.109.193Azure · CLOUDUnited States
AS8075Microsoft Corporation
3142.251.20.132Google · CDNUnited States
AS15169Google LLC
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6923--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16D52D733E254163B026783EE62CBF199B5716086E115CE16316D8EFD1FC2A9109F2FAD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:6wZWNNn/dbdepDZeUrC/Kzm8Er6YOk49H050eQRumkubMZ9yhVlP:vZW/n/dbdepD3C/Kzmn9Yxfh3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13589:FwACQBAYoPLApQlJAYiqBccAQDBhGkQhIYDAIIpT0fAxswTKIJNramOLCJESIQgNRAIjReLNCyUAhIAIMABkQWkTmAgQRQsP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000800ffffff
Perceptual Hash:9116ec6647e93669
Difference Hash:de7c3cf8484c3333
Wavelet Hash:02060e0c00ffffff
Color Hash:#5384ac

Scan History

Scan history not available

Unable to load historical scan data