ScanMalware.com

Security Scan Report: demdo.pages.dev

Redirected to:
https://www.google.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cde43af5-e2b5-4273-91c6-f6869f81f818Domain and IP registration (RDAP)/api/v1/rdap/cde43af5-e2b5-4273-91c6-f6869f81f818How often this domain was scanned/api/v1/domain/stats/demdo.pages.devScan history for this domain/api/v1/domain/history/demdo.pages.dev?limit=15
This website contacted 22 IPs in 1 country across 10 domains to perform 54 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://demdo.pages.dev/

Effective URL:
https://www.google.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Thin 'video player' page on a pages.dev subdomain that redirects once to Google; no forms, brand claims, threat-intel, hunting rule or phishing IDS hits. Only quirks are unknown subdomain age and the redirect.

Risk Factors (2)
Free hosting subdomain of unknown creation date that redirects off-site to a different registrable domain, obscuring what content was originally intended.
Scanner-vs-client content mismatch (bot challenge to datacenter IP, real content to residential client) — common bot protection, but combined with the minimal-content redirect it reduces transparency.
Safety Factors (1)
Final URL resolves to Google/Blogger infrastructure with first-party Google assets (gstatic, googletagmanager, blogger.com).
Domain age information unavailable

Details

Page Title

video player

Scan Type

public

Domain Name Analysis

Domain 'demdo.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'demdo'. Its registrable label 'pages' stretches across 5 characters with 2 vowels and three consonants. Tokenizing the label suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Q PLAY 2 DOWNLOAD — — NN a — co — — — —

Page Load Overview

1.09s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:12 chars
Detector Agreement:0%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16142.251.152.119Google · CDNUnited States
AS15169Google LLC
12172.66.47.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.157.120Google · CDNUnited States
AS15169Google LLC
2192.178.183.191Google · CDNUnited States
AS15169Google LLC
2142.251.110.132Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.14.141Google · CDNUnited States
AS15169Google LLC
2142.251.152.120Google · CDNUnited States
AS15169Google LLC
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
2142.251.153.7Google · CDNUnited States
AS15169Google LLC
5422--

Detected Technologies1

Google Analyticsvga4
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F65285F6BCB68C765A72CE482411790CC512B6BEF495D84DE0B837963BD3AA343D6384

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hW9CTePyvOSYn1vrAlAl7l0Cltluqflml6lepglBlLlQlX0+A8GLuj+l4:Xe5r22Z0ILuqNswAWvpGX0+A8GLg+l4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13891:h0YQMGAWq8KFCJZg0iGXBRGBBFYkgPICXx3AiUAABAiw1AjZCgBlIYE0JhAORojGN0m+gCQgPC6JJKCQNFSECBgEQaQDZgoi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3ffc3c3c3c3c3
Perceptual Hash:accb9336cb92c21b
Difference Hash:1616271707070f0f
Wavelet Hash:ffc3c3c381c38383
Color Hash:06e00000000

Other Hashes

Crop Resistant:1616271707070f0f,d29dcdcdd2cca241,fa1a999999a96ae6,8282925041414141,aba39b93378bcb0f

Scan History

Scan history not available

Unable to load historical scan data