Security Scan Report: 1-cs9.pages.dev

Redirected to:
https://www.google.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 2 countries across 10 domains to perform 47 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://1-cs9.pages.dev/

Effective URL:
https://www.google.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Adult escort-solicitation page on an unknown-age pages.dev subdomain using a signup lure; no credential or payment forms, no impersonation, no malware hit, so risk stays moderate.

Risk Factors (4)
Explicit adult-services solicitation with a 'free registration' lure and no verifiable operator, location or contact details
Cloaking-style behaviour: scanner received a Google block page while a residential client received the real adult content, and the chain redirects away to www.google.com
Unknown-age Cloudflare Pages subdomain with no reputation
Loads a third-party CDN domain that a threat feed has flagged for outbound abuse (single-source, unverified)
Safety Factors (5)
No credential, password or payment fields present, so no direct data-harvesting form
No brand impersonation of another entity detected
No hunting rule or native-scanner JavaScript malware hits; no known phishing-kit roster match
No cross-origin credential exfiltration and no suspicious script behaviour observed
The threat-intel match is a generic abuse-reputation tag on a third-party resource, not content malware
Domain age information unavailable

Details

Page Title

Servicio Privado

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), '1-cs9.pages.dev' is registered with subdomain '1-cs9'. Its registrable label 'pages' stretches across 5 characters split between 2 vowels and 3 consonants. Segmentation suggests 1 word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

ilio por noches por horas, a todos idad quieres ver mi catalogo”. — Ne e” > +. - . a - a A : e o "es > ¿O > - » Sy ~ »” » ~ > ¢ ~~

Page Load Overview

0.84s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:475 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

adult content64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
64%
entertainment media
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.4.7Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.64.211.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2146.75.120.193Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2142.251.13.139Google · CDNUnited States
AS15169Google LLC
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
2142.251.152.120Google · CDNUnited States
AS15169Google LLC
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.151.7Google · CDNUnited States
AS15169Google LLC
4723--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112A1742BC400521B06A240F0A2F6B24E94E1CA2BFA42C985F5DDC76EBFC4FC54C579A5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:9HVdCg+bEpHH2PHWPHZPHFHllx4XYA+0wYW/cAB/9C3hj:9L7+b+WP2P5PlF/OONFCj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5034:sBEIBgAFClfMEJAAKABhgQIgQJSIBgeBwQUBAHAASaQBAjCAigjSAAhAoYAlJBUABA6DrFaiQGEIEAQACICskKEAAUEAQgIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f0f0f0b0b0808080
Perceptual Hash:efc6303bccf831a0
Difference Hash:666666626b6b292c
Wavelet Hash:fbf3f2fab8808082
Color Hash:N/A

Other Hashes

Crop Resistant:666666626b6b292c

Scan History

Scan history not available

Unable to load historical scan data