Security Scan: Privacy Policy

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a17d7c87-37f2-4c76-b912-8a4645ca52bf Domain and IP registration (RDAP)/api/v1/rdap/a17d7c87-37f2-4c76-b912-8a4645ca52bfHow often this domain was scanned/api/v1/domain/stats/helps-business.pages.dev Scan history for this domain/api/v1/domain/history/helps-business.pages.dev?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 12 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://helps-business.pages.dev/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Empty privacy-policy page on a free .pages.dev subdomain, but its scripts carry a CRITICAL Telegram credential-exfiltration pattern and a live bot token plus anti-devtools code — treat as malicious infrastructure.

Risk Factors (5)

CRITICAL hunting rule stealer-pattern match (Telegram credential exfiltration) in inline page JavaScript

Embedded Telegram bot token enabling out-of-band exfiltration of anything the page collects

anti-devtools / anti-analysis library suppresses inspection of the page

Near-empty page content on a platform subdomain of unknown creation date

Obfuscation/encoding functions present in inline scripts

Domain age information unavailable

Details

Page Title

Privacy Policyother network

Scan Type

public

Domain Name Analysis

The domain name 'helps-business.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'helps-business'. The second-level label 'pages' is 5 characters long containing 2 vowels alongside three consonants. Splitting it apart reveals 1 word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

N/A

Total Load Time

18 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:14 chars

Detector Agreement:0%

Website Classification

Primary Category

corporate50% confidence

Type: static

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.156.119Google · CDN	United States	AS15169Google LLC
0	3	-	-

Detected Technologies1

Open-Graph-Protocolvwebsite

100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E131C0A7D9E0951D12319105ACD1F92AC945E803C23C2821F6AD06FE8FDAB85C1BF916

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hR8qo5sIZ/bV4PK/gcg7bIBubIeK04q0o0X0mD/NImKWVvVXx7E/WBQ:T8qtm/bV4PK/gcgABliEtkmLOmxx7uWy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1508:AYAAAgAIAAAAAAgAAEEAAAACAAAAAAIAAAAAAAAAAAAAAAAAAAASAEAAAAiAEAogUAACCAgAAAIAAQQAAAAAAADAAAACAAgQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: helps-business.pages.dev