ScanMalware.com

Security Scan Report: baianbs.pages.dev

Redirected to:
https://www.google.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9a3ad49d-3819-4613-9203-068daa22c873Domain and IP registration (RDAP)/api/v1/rdap/9a3ad49d-3819-4613-9203-068daa22c873How often this domain was scanned/api/v1/domain/stats/baianbs.pages.devScan history for this domain/api/v1/domain/history/baianbs.pages.dev?limit=15
This website contacted 26 IPs in 3 countries across 13 domains to perform 50 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://baianbs.pages.dev/

Effective URL:
https://www.google.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Facebook-branded login page on a free pages.dev subdomain, gated behind an 18+ video lure, posting entered credentials to an unrelated third-party server (dyllor.com). Classic credential phishing — do not enter any login details.

Risk Factors (5)
Brand impersonation of Facebook on a non-Facebook domain (baianbs.pages.dev)
Credential-harvesting login form (email + password) behind an adult-video pretext
Cross-origin form submission to dyllor.com/panel/nini/trx.php — off-domain credential exfiltration
Free hosting-platform subdomain (pages.dev) with unknown creation date, unranked in Cisco Umbrella
Scanner-vs-client content mismatch: bot protection served a Google-branded challenge to datacenter IPs while residential clients received the phishing page
Domain age information unavailable

Details

Page Title

ver vid

Scan Type

public

Domain Name Analysis

The domain name 'baianbs.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'baianbs'. The registrable portion 'pages' spans 5 characters split between two vowels and 3 consonants. It segments into one word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Contenido privado, antes de continuar, confirmas que eres mayor de 18?

Page Load Overview

1.12s
Total Load Time
984 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:225 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

social media network96% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
96%
adult content
89%
phishing scam
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.172.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.64.211.78Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1146.75.120.193Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1195.154.239.27Paris, Île-de-France, France
AS12876Scaleway SAS
1142.251.13.139Google · CDNUnited States
AS15169Google LLC
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
5026--

Detected Technologies1

jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EC92851BDA802605A053C8FC67D36B4A6BE08017C10391B979CFA709DFCAEDC85E279D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:9rtf+b6Ou5tPmgSuMzXs+4lYTn/1iihjC3Udikdv+7Fblkk+SuMzXs+4lYTn/1iZ:9r7Ou5tPeilYjC3UOhhBilY/CSe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20108:AEGwPABSFqBAEpIWCAQuIICDBAFMFgIAFcuEAMQ8YSAaBS4GYWFACjRiFUSGiYJrbxIZ8hKTIYECYDgAJChBhCAkiQEIGEAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101013d19010101
Perceptual Hash:aadd327388cd2273
Difference Hash:0101013131090101
Wavelet Hash:ff81c1fdbd818501
Color Hash:N/A

Other Hashes

Crop Resistant:0101013131050101

Scan History

Scan history not available

Unable to load historical scan data