Security Scan Report: cthor2.pages.dev

Site favicon
Submitted: May 6, 2026, 10:31:35 PMCompleted: May 6, 2026, 10:32:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is cthor2.pages.dev and was registered NaN years ago.

Submitted URL: https://cthor2.pages.dev/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Critical malware alerts and brand impersonation on an unranked hosting subdomain indicate a high‑risk malicious site; avoid and report.

Risk Factors
Critical malware IDS alert indicating possible data exfiltration
High‑severity IDS alert on HTTPS POST traffic
Unranked domain used for brand impersonation (Meta)
Subdomain on a generic hosting platform with unknown age
Presence of external analytics domains (cloudflareinsights.com)
Domain age information unavailable

Details

Page Title

Index • cthor.me

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(59%)

Domain Information

The domain name 'cthor2.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'cthor2'. Its registrable label 'pages' stretches across 5 characters with two vowels and three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cthor2.pages.dev/

Page Load Overview

0.44s
Total Load Time
11
HTTP Requests
3
Domains
104 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:807 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical59% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
59%
adult content
58%
technology software
38%
entertainment media
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.66.47.146United States
AS13335Cloudflare, Inc.
5104.16.80.73United States
AS13335Cloudflare, Inc.
112--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15E120F1720F5107B0377125E6F963B28BE5BA05B920DAE153A5C8B4D6F82A178D933CF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:PrKMfZbK7X7mp+9SKJQbUU13FwY+YI4baVlDmdOML4:P2NjCprEaX13Fw8I8vOs4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9757:PjigABwYHeAgIVhLwEAQLEEUEk6GAgU+gKAIiGET4IMyQIkGxDyBKkAAQhKjBGBBUaMOqEDQkH1EQAAoMDLEgWKwFIAAIBiC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8783838b83afe7ff
Perceptual Hash:b73dd232ccc2cc26
Difference Hash:2c3e56520a480c00
Wavelet Hash:a68282a0838fe7ff
Color Hash:#753a78

Other Hashes

Crop Resistant:2c3e56520a480c00

Scan History

Scan history not available

Unable to load historical scan data