Security Scan Report: ciyg-odkrkz-d7eer-jgjybd.pages.dev

Redirected to:
https://ciyg-odkrkz-d7eer-jgjybd.pages.dev/
Site favicon
Submitted: Sep 13, 2026, 6:51:28 AMCompleted: Sep 13, 2026, 6:53:42 AMpubliccompleted

This website contacted 3 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is ciyg-odkrkz-d7eer-jgjybd.pages.dev and was registered 17 years ago.

Submitted URL: http://ciyg-odkrkz-d7eer-jgjybd.pages.dev/

Effective URL:

https://ciyg-odkrkz-d7eer-jgjybd.pages.dev/
Redirected

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

Cloudflare has flagged this random-named pages.dev host as distributing malware; the interstitial offers a bypass to proceed. Treat the site as unsafe and do not continue.

Risk Factors
Cloudflare malware warning page served for this host
Random/obfuscated subdomain on a shared instant-hosting platform
Unranked domain with unknown tenant age
Warning-bypass control invites visitors to proceed to flagged content
Safety Factors
The two Suricata alerts are informational DNS/TLS observations about pages.dev, not malware or phishing signatures
No credential or payment form present on the interstitial (password fields = 0, payment fields = 0)
No Indicators of Compromise matches, no JavaScript YARA hits, and no credential-exfiltration behavior detected
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

ciyg-odkrkz-d7eer-jgjybd.pages.dev

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'ciyg-odkrkz-d7eer-jgjybd.pages.dev' is registered with subdomain 'ciyg-odkrkz-d7eer-jgjybd'. The core label 'pages' covers 5 characters holding two vowels versus three consonants. Word splitting yields 1 word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://ciyg-odkrkz-d7eer-jgjybd.pages.dev/

Page Load Overview

13.38s
Total Load Time
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:396 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
59%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.66.44.184Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.66.47.72Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195214627FD2E05DF31D2B27129FD7204A7D8CA52D30F1885FDE4512A8ED4F6D9446081

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hGzujxz5TjTYwjGdiDzksPk11kANaLnjD+DM0jJs30jRRjCy4m5EG:8uj15TjEwjGdiv8DaLnjD+DMMs0j/4s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1126:AAlAIAAAAAAABAAAAAAAAACCAAAQAAAAAQAAABAAAAABAAAAEQAAAIIQAAAIARAAAAACAAAAAAASAAAACAIABAgAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:df8787ffe7e7ffff
Perceptual Hash:b83898c7c7c72c3c
Difference Hash:203c3c1004040000
Wavelet Hash:9c848c8c03033f3f
Color Hash:#6c783a

Other Hashes

Crop Resistant:203c3c1004040000

Scan History

Scan history not available

Unable to load historical scan data