Security Scan Report: 28lxx.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 16 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://28lxx.pages.dev/

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Anonymous age-gate page on a free pages.dev subdomain reached through six cross-domain redirects, with adult-content classification. No forms, no credential harvesting, and no threat-intel, YARA, or phishing/malware IDS evidence, so risk is moderate.

Risk Factors (4)
Six cross-domain redirects obscure the final destination and are typical of redirect-chain traffic funnelling
Hosted on a free pages.dev subdomain whose actual creation date is unknown (apex age is not attributable to this page)
No identifying ownership, imprint, or contact information — only an age-check screen
Page content is a bare age gate consistent with adult-content affiliate redirection
Safety Factors (5)
No credential, login, or payment form on the page
No cross-origin credential exfiltration detected
No threat-intelligence matches, no YARA malware hits, no kit-roster identification
Third-party script host (Yandex Metrica) is a ranked, established analytics service
Only informational IDS alerts about the pages.dev hosting platform, not phishing or malware signatures
Domain age information unavailable

Details

Page Title

Alter bestätigen!

Scan Type

public

Domain Name Analysis

The domain name '28lxx.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain '28lxx'. The registrable portion 'pages' spans 5 characters split between 2 vowels and 3 consonants. Splitting it apart reveals 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://28lxx.pages.dev/

Page Load Overview

1.13s
Total Load Time
93 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:68 chars
Detector Agreement:100%
Language mismatch: Declared as ru but detected as de

Website Classification

Primary Category

adult content81% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
81%
healthcare medical
68%
news media journalism
56%
finance banking
56%
government public service
53%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.66.47.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
387.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
377.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
3172.66.44.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
387.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
165--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F24154936C82942F832312EAF3A7E71871A59D21C9429D04D4FC80E62FD4FE8CC27599

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TvmI0wfBJmbB66bCJHZV6Y7yeTUBu6onjEOzRcGwukLO:hKbcTF6Y7J8uBn7za+P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1978:AAAAgAiAAAAAAFKAEAQQAAAgFAQEAAAwACJCEAAAAIBAAQAAAAkCEAAACAAQAAAAAQIAAIAgAgAAAQARCgEAAgAkACEAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7ffffff
Perceptual Hash:f333cc8c338ccc33
Difference Hash:0008080c0c000000
Wavelet Hash:0e0e2424e0f0f0f0
Color Hash:#d2c679

Other Hashes

Crop Resistant:0008080c0c000000

Scan History

Scan history not available

Unable to load historical scan data