Security Scan Report: internalallthethings.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 28 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://internalallthethings.pages.dev/redteam/access/html-smuggling/

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Offensive-security cheatsheet with self-branding and no forms or exfiltration; the CobaltStrike/IDS hits are signature false positives on documentation text, not delivered malware.

Risk Factors (3)
Hosted on a shared free platform subdomain (.pages.dev) with unknown actual creation date
Offensive-security content (HTML smuggling, Cobalt Strike, AD attack techniques) that trips AV/IDS signatures
Domain not present in Cisco Umbrella rankings
Safety Factors (5)
Established, publicly known security documentation project with matching self-branding
No credential or payment harvesting forms present
No JavaScript malware (YARA), no malicious kit roster hit, no Safe Browsing/phishing IDS alert
No Indicators of Compromise matched against the scanned page or its resources
Educational/reference framing with no deception, urgency, or data collection
Domain age information unavailable

Details

Page Title

HTML Smuggling - Internal All The Things (中文版)

Scan Type

public

Domain Name Analysis

You're looking at domain 'internalallthethings.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'internalallthethings'. The registrable portion 'pages' spans 5 characters containing 2 vowels alongside three consonants. Splitting it apart reveals 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://internalallthethings.pages.dev/redteam/access/html-smuggling/

Page Load Overview

0.87s
Total Load Time
295 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,440 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
99%
documentation technical
90%
government public service
52%
adult content
43%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.251.13.95United States
AS15169Google LLC
4140.82.121.6Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
4104.21.29.107United States
AS13335Cloudflare, Inc.
4172.66.171.172United States
AS13335Cloudflare, Inc.
4142.251.110.94United States
AS15169Google LLC
4188.114.96.3United States
AS13335Cloudflare, Inc.
4104.26.0.192United States
AS13335Cloudflare, Inc.
287--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F8A39C5168F2347A016BA5F206F51B21BED88067F1876D0677EC97389FDAF02BD43829

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:MN75sn/Cg1N6AhdXFDb8hfCJ7RjXxTmA/7it:MoDx1e

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:100401:AyQBpiDrBQAwCBICAm4oQxAYgsozOiycWAvgwYZSKEqcMJEFJAAOMSANohBBKKEwPIwUEFJIyYDBGkBJ0ApCZACAViTQWA5g

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffdf5fdfdf
Perceptual Hash:b0447b6a7b2a2b6a
Difference Hash:1980b0b293939319
Wavelet Hash:005e7fc3414fc1cf
Color Hash:#362d86

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data