Security Scan Report: nextjs-notion-clone.pages.dev

Site favicon
Submitted: Dec 7, 2025, 8:54:40 AMCompleted: Dec 7, 2025, 8:55:48 AMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 2 countries across 3 domains to perform 36 HTTP transactions. The main domain is nextjs-notion-clone.pages.dev.

Submitted URL: https://nextjs-notion-clone.pages.dev/cloudflare--invest-like-the-best-s1

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Page impersonates Cloudflare on an unranked, likely new domain – high risk phishing.

Risk Factors
Brand impersonation of Cloudflare on an unrelated domain
Unranked, likely newly registered domain
Lack of any official Cloudflare branding or verification
Domain age information unavailable

Details

Page Title

Cloudflare - Invest Like The Best + S1

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(59%)

Domain Information

The domain name 'nextjs-notion-clone.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'nextjs-notion-clone'. The registrable portion 'pages' spans 5 characters with 2 vowels and three consonants. Breaking it apart gives 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nextjs-notion-clone.pages.dev/cloudflare--invest-like-the-best-s1

Page Load Overview

1.22s
Total Load Time
36
HTTP Requests
3
Domains
670 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:14,608 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
59%
documentation technical
32%
phishing scam
30%
corporate business
29%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32172.66.45.37United States
AS13335CLOUDFLARENET
223.192.152.19Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
223.52.180.26Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
2146.75.123.6Frankfurt am Main, Hesse, Germany
AS54113FASTLY
2172.66.46.219United States
AS13335CLOUDFLARENET
22a02:26f0:7100:8ba::2a1Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22a04:4e42:8e::774Frankfurt am Main, Hesse, Germany
AS54113FASTLY
22a02:26f0:7100:8a2::2a1Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22606:4700:310c::ac42:2edbUnited States
AS13335CLOUDFLARENET
22a02:26f0:7100:8bf::2a1Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3613--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174B3E807E3A06A77839B438F5176F6E1E9A6705BD3D54074A51CC3C886C8F618B2BF86

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:McqfQyVq+3Qt2CzJhd9b4zCXd9f8AMGBZh1W:McqflV73U2CzJhACXdB8AMGTu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116774:KBZKcFMiCBdSAjIhEIgCEtCMw+gGAEyJNarpBCqAEFojUJniCEJB4AngoDQygIpAFLsJAqQAVAEs1Ej2RIAupkdcRCAEAQag

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ec7c7dfc1cfc3c3
Perceptual Hash:b09724cf8b8d9b64
Difference Hash:401c1c101f1b1616
Wavelet Hash:3ec2cecec1c1c3c2
Color Hash:#d2b079

Other Hashes

Crop Resistant:401c1c101f1b1616

Scan History

Scan history not available

Unable to load historical scan data