Security Report: klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/97887b1a-bb42-4d6f-b194-6d5053dbb075 Domain and IP registration (RDAP)/api/v1/rdap/97887b1a-bb42-4d6f-b194-6d5053dbb075 Certificate Transparency/api/v1/ct/klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev How often this domain was scanned/api/v1/domain/stats/klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev Scan history for this domain/api/v1/domain/history/klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev and was registered 6 years ago.

Submitted URL: http://klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev/

Effective URL:

https://klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev/

Redirected

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

The site shows suspicious eval usage and is an unranked subdomain, but lacks concrete malicious indicators such as credential forms or IoC matches.

Risk Factors (3)

High number of eval() calls

Unranked hosting subdomain (potentially brand‑new)

Cloudflare warning page suggesting possible malware

Domain age information unavailable

Details

Page Title

Suspected Malware | Cloudflare

Scan Type

public

Favicon Hash

MMH3: 1007520286

MD5: 5e1f5addac24d740cec0c41d5f99cd20

Domain Name Analysis

Domain 'klmqw442nh-yhnujlpw-8b6a0d-klm29c.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'klmqw442nh-yhnujlpw-8b6a0d-klm29c'. The registrable portion 'pages' spans 5 characters with 2 vowels and three consonants. Tokenizing the label suggests one word: pages. No strong language cues emerged from the frequency lists.