Security Scan Report: j-8hf.pages.dev

Redirected to:
https://www.google.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 2 countries across 10 domains to perform 53 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://j-8hf.pages.dev/

Effective URL:
https://www.google.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Adult escort-lure page on a free pages.dev subdomain that pushes off-site registration and redirects through ad tracking. No credential or payment form, no malware, no brand impersonation; advisory-level risk only.

Risk Factors (3)
Adult/escort lure using garbled, obfuscated wording ('C0GER', distorted OCR text) to evade filters and drive off-site registration
Free hosting-platform subdomain with unknown creation date used for a commercial 'service' page
Multiple cross-domain redirects ending on an unrelated domain (www.google.com) with ad-click tracking parameters
Safety Factors (1)
The only threat-intel match is a generic abuse-reputation tag on a third-party resource, which does not indicate content malware
Domain age information unavailable

Details

Page Title

Servicio Privado

Scan Type

public

Domain Name Analysis

Domain 'j-8hf.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'j-8hf'. The second-level label 'pages' is 5 characters long holding 2 vowels versus 3 consonants. Word splitting yields 1 word: pages. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://j-8hf.pages.dev/

Page Load Overview

29.14s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:4,116 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content63% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
63%
government public service
37%
social media network
29%
blog personal website
27%
e-commerce shopping
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.66.45.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.71.57Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.64.211.78Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2146.75.120.193Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2142.251.14.113Google · CDNUnited States
AS15169Google LLC
2142.251.154.119Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.138Google · CDNUnited States
AS15169Google LLC
5323--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15CB1862AD800561B06A250F062F2B34D94E5CA1BFA42C985F5DDC76EBFC4FC54C17975

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:9AVdCg+bEpHH2PHWPHZPHFHllx4XYA+0wYe//cAB/9C3hDzYV:9I7+b+WP2P5PlF/OynNFCDe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5140:wAEIQgAEiBTEGJACqIQHgQAQwBSABiaRwQEIAGkASZgFAjCEiglCAAhAoYAlBAEgAAirpFYiQQEKMIQgCIAokKEABWAJCwIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:d8d8d8d8d84040c0
Perceptual Hash:c8d876669c8e672c
Difference Hash:b3b392b293938b8e
Wavelet Hash:f9d9f8d8d8e0e0c0
Color Hash:#53ac77

Other Hashes

Crop Resistant:b3b392b293938b8e

Scan History

Scan history not available

Unable to load historical scan data