Security Scan: PDf Document*

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c94f750a-53c4-462f-8e6c-c1dbc8efc5e2 Domain and IP registration (RDAP)/api/v1/rdap/c94f750a-53c4-462f-8e6c-c1dbc8efc5e2How often this domain was scanned/api/v1/domain/stats/3d1d6f82.documentreviews.pages.dev Scan history for this domain/api/v1/domain/history/3d1d6f82.documentreviews.pages.dev?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://3d1d6f82.documentreviews.pages.dev

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake 'Protected Document' page on pages.dev uses malicious JavaScript to exfiltrate credentials via Telegram; an email verification form harvests user data. Confirmed phishing scam.

Risk Factors (4)

Malicious JavaScript designed for Telegram-based credential exfiltration

Credential harvesting form (email field) on a free hosting subdomain

Use of a 'protected document' pretext to trick users into submitting data

Shared hosting platform tenant with unverifiable age

Domain age information unavailable

Details

Page Title

PDf Document*

Scan Type

public

Favicon Hash

MMH3: -1673718888

MD5: f2defaa9e5394c101bb856b7c52e683d

Domain Name Analysis

You're looking at domain '3d1d6f82.documentreviews.pages.dev' on the developer-focused generic top-level domain (.dev) with subdomain '3d1d6f82.documentreviews'. The registrable portion 'pages' spans 5 characters with 2 vowels and 3 consonants. Splitting it apart reveals one word: pages. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.75s

Total Load Time

139 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:132 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content49% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

49%

healthcare medical

45%

finance banking

44%

news media journalism

39%

government public service

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	99.84.152.93Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	13.226.244.53Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	159.89.102.253	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	13.226.244.92Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
8	6	-	-