Security Scan Report: sunny-robin-12ab.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 45 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://sunny-robin-12ab.pages.dev/ko-kr/about

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Unofficial Cloudflare-branded speed test FAQ mirrored on a random pages.dev subdomain with no affiliation disclosure, but no forms, no data collection and no threat-intel, malware or JavaScript hits; brand misuse alone, not confirmed phishing.

Risk Factors (3)
Unofficial use of the Cloudflare brand/name on a non-official hostname with no affiliation disclosure
Randomly generated Cloudflare Pages subdomain; page creation date unknown and content could have been deployed recently
Body text was templated to insert the hosting hostname in place of the real service name, consistent with a copied/cloned page
Safety Factors (4)
No forms of any kind — no credential, login, password, email or payment fields
No Indicators of Compromise, no YARA malware patterns, no kit-roster matches, no malicious JavaScript
Content is purely informational FAQ text about how a speed test works; no obfuscated scripts or cross-origin credential exfiltration
Hosted on Cloudflare's own Pages platform; the external resource observed (challenges.cloudflare.com) is Cloudflare's standard challenge service
Domain age information unavailable

Details

Page Title

Cloudflare Speed Test 소개 | Cloudflare

Scan Type

public

Domain Name Analysis

The domain name 'sunny-robin-12ab.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'sunny-robin-12ab'. Count 5 characters in 'pages' containing two vowels alongside three consonants. Splitting it apart reveals 1 word: pages. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sunny-robin-12ab.pages.dev/ko-kr/about

Page Load Overview

1.72s
Total Load Time
311 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:80%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:ko-KR
Text Length:2,370 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
454--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1E2E976308297AD32525A46B9E1B7F0E1C2A52BEB230070EF85CE875C94FE7C543A35

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:fp1AxfHCBqRfs6XGTtwddZAac4avvnpSqTgrm4vffIuFTsRaABsh9g+ZyrZNJp/I:AfiBqRfnrkvnpb4Hfd9g+ZarIfPGY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31654:IQRy0TMC4QlphKIMESLhkDJAJZIhtAQ9boAYAERIdHIkBI0EFiCiNsBEzqwRCOgQQAEJRFLQCEYI4qJ3VGIT2ghlSQgEwqBF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3dfcfc3c3c7c3
Perceptual Hash:b8c7c68c399ecc92
Difference Hash:320e2e1e16163e1e
Wavelet Hash:dec2c6c2c3c3c3c3
Color Hash:#e06c7f

Other Hashes

Crop Resistant:320e2e1e16163e1e

Scan History

Scan history not available

Unable to load historical scan data