Security Scan Report: golden-canyon-9120.pages.dev

Redirected to:
https://golden-canyon-9120.pages.dev/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 55 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://golden-canyon-9120.pages.dev/

Effective URL:
https://golden-canyon-9120.pages.dev/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Cloned Cloudflare speed-test page on an unofficial pages.dev subdomain, falsely bearing Cloudflare branding and copyright. No forms, no credential or payment capture, and no threat-intel, YARA or malware signals — misleading branding, minimal harm.

Risk Factors (3)
Displays another entity's brand (Cloudflare) and copyright notice on a non-official tenant subdomain
Unknown creation date for the pages.dev subdomain; unranked in Cisco Umbrella
Impersonation is purely cosmetic here — a cloned speed-test page with no data-collecting forms
Safety Factors (4)
No forms at all: no credential, password, email or payment fields
No Indicators of Compromise, no malware YARA matches, no kit-roster match
No cross-origin credential exfiltration and no malicious JavaScript behavior detected
Functionality described (running a speed test) matches legitimate Cloudflare tooling; no request for personal or financial data
Domain age information unavailable

Details

Page Title

Internet Speed Test - Measure Network Performance | Cloudflare

Scan Type

public

Domain Name Analysis

You're looking at domain 'golden-canyon-9120.pages.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'golden-canyon-9120'. Its registrable label 'pages' stretches across 5 characters with 2 vowels and 3 consonants. Breaking it apart gives one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://golden-canyon-9120.pages.dev/

Page Load Overview

1.01s
Total Load Time
550 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,006 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
554--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A683B973C19221D964DBCFC862A8631C321AB205F07644F4AB796E66DDC7EF315F4A88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:CiZ4qOJm8dwnMgRJSmVcccccccccccccccccccc77777777766ZZZZZZZZggfffQ:CmqmVcccccccccccccccccccc777777Q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82236:hcyBAQ1QBHQhExDWMQIgimFpUKJQAAJSKKLAKYIwmZBCFIEHKGC4gFhghcEAmMyBBX2IAXlQXAG5AQOKgAhJAyYkrGMNRBjF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8983c18183fbfffd
Perceptual Hash:bb3f86853b324b84
Difference Hash:79761b1b12230043
Wavelet Hash:8183818183fbffb9
Color Hash:#40acbf

Other Hashes

Crop Resistant:79761b1b12230043

Scan History

Scan history not available

Unable to load historical scan data