ScanMalware.com

Security Scan Report: 3a2cd665.5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e6.pages.dev

Site favicon
Submitted: Nov 28, 2025, 6:48:19 AMCompleted: Nov 28, 2025, 6:51:05 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is 3a2cd665.5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e6.pages.dev.

Submitted URL: https://3a2cd665.5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e6.pages.dev/

AI Security Verdict

High Risk

Confidence: 92%

7
Risk Score

Site is flagged by Cloudflare as a phishing page; do not trust.

Risk Factors
Cloudflare phishing warning (very strong indicator)
Unranked, newly created domain
Hosted on a generic Cloudflare Pages subdomain
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Suspected phishing site | Cloudflare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

phishing scam

(96%)

Domain Information

Domain '3a2cd665.5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e6.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain '3a2cd665.5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e6'. The registrable portion 'pages' spans 5 characters split between 2 vowels and three consonants. Breaking it apart gives 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://3a2cd665.5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e6.pages.dev/

Page Load Overview

0.17s
Total Load Time
6
HTTP Requests
2
Domains
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:378 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam96% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
96%
technology software
32%
documentation technical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.66.44.181United States
AS13335CLOUDFLARENET
4172.66.47.75United States
AS13335CLOUDFLARENET
1104.18.95.41United States
AS13335CLOUDFLARENET
02606:4700::6812:5e29United States
AS13335CLOUDFLARENET
02606:4700:310c::ac42:2cb5United States
AS13335CLOUDFLARENET
02606:4700::6812:5f29United States
AS13335CLOUDFLARENET
0104.18.94.41United States
AS13335CLOUDFLARENET
02606:4700:310c::ac42:2f4bUnited States
AS13335CLOUDFLARENET
68--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18A916267BABD107F109391B366BD770939A1C003CB9709907ABCC2751F8AF96AD132C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PjnjtjuiADa/D+DMFozLeiO/t8A2uxBnRV3vaQxvb0:PjnjtjuiEa/SoYnOVsubnf3Cej0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4344:RAIAAJEAAAAIEMEgsjgBAABUAAFgggDARACAACAFFAOAdCaAAKFQAIQPAAAOJAAEAKECkBIEEIkACAAASQQABCCIQGAxAgAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff7e1e003efeffff
Perceptual Hash:9715f0c70778f807
Difference Hash:00c0705a42004000
Wavelet Hash:ce0e0e000ececece
Color Hash:#b36ce0

Other Hashes

Crop Resistant:00c0705a42004000

Scan History

Scan history not available

Unable to load historical scan data