Security Scan Report: 2swj45-kdhaf-bph3e-55up-rtm3.pages.dev

Redirected to:
https://2swj45-kdhaf-bph3e-55up-rtm3.pages.dev/
Site favicon
Submitted: Sep 13, 2026, 12:51:02 PMCompleted: Sep 13, 2026, 12:52:01 PMpubliccompleted

This website contacted 3 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is 2swj45-kdhaf-bph3e-55up-rtm3.pages.dev and was registered 6 years ago.

Submitted URL: http://2swj45-kdhaf-bph3e-55up-rtm3.pages.dev/

Effective URL:

https://2swj45-kdhaf-bph3e-55up-rtm3.pages.dev/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Unreachable pages.dev subdomain showing a Cloudflare 'Suspected Malware' warning plus 68 eval() calls, but no forms, no threat-intel hits and no verified malware. Suspicious, not confirmed malicious.

Risk Factors
User-visible malware-distribution warning shown on the page
Heavy use of eval() for dynamic code execution
Unreachable origin behind a 502 error, leaving only a warning/challenge interstitial to users
Machine-generated subdomain on a free hosting platform with unknown creation age
Safety Factors
No forms of any kind — 0 password, 0 payment, 0 email fields (no credential harvesting)
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript YARA malware patterns and no known malicious kit detected
No network-level IDS alerts and no cross-origin credential exfiltration
Cloudflare security layer and human-verification challenge are present
Domain age information unavailable

Details

Page Title

Suspected Malware | Cloudflaresecondary capture

Scan Type

public

Domain Name Analysis

You're looking at domain '2swj45-kdhaf-bph3e-55up-rtm3.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain '2swj45-kdhaf-bph3e-55up-rtm3'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside three consonants. Splitting it apart reveals one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://2swj45-kdhaf-bph3e-55up-rtm3.pages.dev/

Page Load Overview

23.23s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:100%
Script:Latin
Direction:ltr

Detection Details

Text Length:49 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195214627FD2E05DF31D2B27129FD7204A7D8CA52D30F1885FDE4512A8ED4F6D9446081

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hGzujxz5TjTYwjGdiDzksPk11kANaLnjD+DM0jJs30jRRjCy4m5EG:8uj15TjEwjGdiv8DaLnjD+DMMs0j/4s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1126:AAlAIAAAAAAABAAAAAAAAACCAAAQAAAAAQAAABAAAAABAAAAEQAAAIIQAAAIARAAAAACAAAAAAASAAAACAIABAgAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:df8787ffe7e7ffff
Perceptual Hash:b83898c7c7c72c3c
Difference Hash:203c3c1004040000
Wavelet Hash:98808080c3c3ffff
Color Hash:#d279b0

Other Hashes

Crop Resistant:203c3c1004040000

Scan History

Scan history not available

Unable to load historical scan data