Security Scan Report: kv-cont-blared.pages.dev

Redirected to:
https://kv-cont-blared.pages.dev/help/contact/63724964172440
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 5 domains to perform 13 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://kv-cont-blared.pages.dev/help/contact/317928204491396%25252525252525252CN/A%25252525252525252Chttps%25252525252525253A/openphis/

Effective URL:
https://kv-cont-blared.pages.dev/help/contact/63724964172440
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Unranked free pages.dev subdomain with an unknown creation date, hosting a generic 'help center' intake form and an odd encoded URL path; no credential/payment fields, no impersonation and no malware or threat-intel hits, so risk is moderate rather than confirmed.

Risk Factors (4)
Content published on a shared, free instant-subdomain platform under an unranked domain, so the page has no verifiable age or reputation of its own
Generic multi-step 'help center / contact support' intake template ('This form will only take a few minutes') of the type frequently reused by kit pages, with no identifiable real business behind it
Malformed, recursively URL-encoded path containing an embedded URL and the fragment 'openphis'
Legitimacy score 5/100 with only minimal legal-page boilerplate; no verifiable company identity, address or contact details
Safety Factors (6)
No credential, password or payment fields present in the captured DOM (verified form facts: 0/0/0)
No brand impersonation detected — the page presents no other organisation's brand, logo or login
No cross-origin form submissions and no credential exfiltration observed
No Indicators of Compromise, no JavaScript malware patterns, no native-YARA hits and no known malicious kit in the roster
Cross-origin script usage is limited to a popular CDN (cdn.jsdelivr.net) and to public IP-lookup services (api.ipify.org, freeipapi.com)
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Business Help Center | Privacy Policy

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'kv-cont-blared.pages.dev' is registered and includes subdomain 'kv-cont-blared'. The core label 'pages' covers 5 characters containing 2 vowels alongside three consonants. Tokenizing the label suggests one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kv-cont-blared.pages.dev/help/contact/317928204491396%25252525252525252CN/A%25252525252525252Chttps%25252525252525253A/openphis/

Page Load Overview

4.21s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:252 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network77% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
77%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.66.47.150Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.193.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.66.44.106Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
139--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T189E1556C19F4200450A386B47EEEA3283768D19F955B9CFDF3E65092CF84A4D7BC6352

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TjG9+mTnlwJECXBM+g+9plpV4d4LB6JROmm+Tv3j:HG+mTlwJECXe+g+9plpV4d41SpxTv3j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6882:AEgEYkAEkEkAiRzCqCQGCA4AiBxQBUNKvQAABTMEA4QQAgAGowA4DAIKBmUgGxohRUA8ZGEAqJGAJISICiCTAAKghJFJDABM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff
Perceptual Hash:c0404260f1f3f77f
Difference Hash:84e1691016060000
Wavelet Hash:000000c3cbf7ffff
Color Hash:#71bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data