ScanMalware.com

Security Scan Report: cloudflare-docs-config.pages.dev

Submitted: Jan 2, 2026, 11:46:38 PMCompleted: Jan 2, 2026, 11:47:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 4 domains to perform 18 HTTP transactions. The main domain is cloudflare-docs-config.pages.dev and was registered NaN years ago.

Submitted URL: https://cloudflare-docs-config.pages.dev/turnstile/

AI Security Verdict

High Risk

Confidence: 92%

7
Risk Score

Site hosts Cloudflare branding on a malicious primary domain; treat as high‑risk and do not trust.

Risk Factors
Primary domain pages.dev matches known malicious Indicator of Compromise
Domain is unranked in Cisco Umbrella (low reputation)
Brand impersonation of Cloudflare on a non‑official domain
Domain age information unavailable

Details

Page Title

Cloudflare Turnstile · Cloudflare Turnstile docs

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(81%)

Domain Information

The domain name 'cloudflare-docs-config.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'cloudflare-docs-config'. The registrable portion 'pages' spans 5 characters split between two vowels and three consonants. Segmentation suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cloudflare-docs-config.pages.dev/turnstile/

Page Load Overview

2.23s
Total Load Time
17
HTTP Requests
4
Domains
538 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,722 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
61%
government public service
48%
blog personal website
36%
cryptocurrency blockchain
30%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.16.175.226United States
AS13335
2104.16.174.226United States
AS13335CLOUDFLARENET
2104.18.87.42United States
AS13335
2104.18.86.42United States
AS13335CLOUDFLARENET
2172.66.47.84United States
AS13335CLOUDFLARENET
2104.18.0.22United States
AS13335CLOUDFLARENET
176--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16833D8239130003A22334AF9D6D36775A4A744CED76B1020E2FA279A53C7EE2F517D9E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2UbKWGvdpMYvc5aIKxQh/j3qWH9mGiXR8dOD9mX7DiXw50+B9toioO4ey4NaPPzK:tidpMNaLkzqWEpRWiFeyNyRqCiBg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:53711:akAKjjAUAlQoVCJAkRHGBRgCxmCwEQCFBYsSaiVEeuMMAIjhrAuAREOwPjDBClgyGAAuDcFhyoSMFg5hYASwECoGgKKjDGdY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0d0fc783cbe7e7cf
Perceptual Hash:b71998cc096673d9
Difference Hash:51164e4e160c0c9e
Wavelet Hash:00838f83c3e7e7c7
Color Hash:#931f72

Other Hashes

Crop Resistant:51164e4e160c0c9e

Scan History

Scan history not available

Unable to load historical scan data