ScanMalware.com

Security Scan Report: 91shipinzaixian1.pages.dev

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/62ced303-b534-4b34-92fa-c9da3bae0d40Domain and IP registration (RDAP)/api/v1/rdap/62ced303-b534-4b34-92fa-c9da3bae0d40How often this domain was scanned/api/v1/domain/stats/91shipinzaixian1.pages.devScan history for this domain/api/v1/domain/history/91shipinzaixian1.pages.dev?limit=15
This website contacted 7 IPs in 2 countries across 4 domains to perform 10 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://91shipinzaixian1.pages.dev/%E8%A7%86%E9%A2%91%E5%AF%BC%E8%88%AA%E7%9C%8B%E5%89%A7%E7%BD%91%EF%BC%81

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Unranked pages.dev doorway page that keyword-stuffs filler text and links out to adult and gambling sites. No forms, IoCs, malware or impersonation found, so risk is capped at moderate — no reason to enter data here.

Risk Factors (4)
Keyword-stuffed, auto-generated body text unrelated to the page's actual purpose (SEO doorway pattern)
Curated outbound directory to adult and gambling/betting destinations with no disclosure of operators or licensing
Anonymous free-host subdomain with no ownership, contact or about information
Mixed-language OCR fragment ('ALATA - HASIESM aH') inconsistent with the Chinese page content
Safety Factors (5)
No credential or payment form on the page — nothing is collected from visitors
No Indicators of Compromise, hunting rule malware patterns, or known-kit roster match
No cross-origin form submissions or credential exfiltration detected in JavaScript
Third-party scripts limited to well-known analytics/CDN hosts (baidu analytics, unpkg)
Page is reachable and contains substantive (if irrelevant) text rather than a bare redirect or login lure
Domain age information unavailable

Details

Page Title

视频导航 -

Scan Type

public

Domain Name Analysis

The domain '91shipinzaixian1.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain '91shipinzaixian1'. The core label 'pages' covers 5 characters with two vowels and 3 consonants. It segments into one word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

ALATA - HASIESM aH

Page Load Overview

2.60s
Total Load Time
103 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,415 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
91%
technology software
80%
adult content
77%
documentation technical
68%
travel tourism
60%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.66.46.252Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1172.66.45.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114.215.183.79China
AS4134Chinanet
114.215.182.140China
AS4134Chinanet
107--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BFC2A63960F4695F050682D9D7B7621E2E81F6BBC11A0A40B3ED4BE42FC2FE3984B54D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:GOJclPWOJDhGdU/RTTPjjWHhkSOiEJgl7foqPq:uPGMRTT7jKhYiEJglLrq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26867:IAPAlsMCyDAgJIOOQIRACJgyBACBgkUaCAggBGwQ1oBhoDAMOoRcUUdADIozwLSnzQy+QSYCcEAWoA2GFJEBAACGP6WMwQA0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:818181879ff7e7f7
Perceptual Hash:bf6b60929631ccca
Difference Hash:0733333e68c69686
Wavelet Hash:818181838fe7e7e7
Color Hash:06000000780

Other Hashes

Crop Resistant:0733333e68c69686,e6e6e7cccccee7e6,8202103031173c6d

Scan History

Scan history not available

Unable to load historical scan data