ScanMalware.com

Security Scan Report: cs001-5ef.pages.dev

Submitted: Dec 20, 2025, 10:30:20 AMCompleted: Dec 20, 2025, 10:32:10 AMpubliccompleted
Loading additional data...

Summary

This website contacted 64 IPs in 8 countries across 56 domains to perform 162 HTTP transactions. The main domain is cs001-5ef.pages.dev and was registered NaN years ago.

Submitted URL: https://cs001-5ef.pages.dev/ru

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Impersonates Ookla Speedtest on an unranked domain with many redirects; likely phishing.

Risk Factors
Brand impersonation on a non‑official domain
Unranked domain with no established reputation for the claimed brand
High number of redirects indicating possible URL manipulation
Domain age information unavailable

Details

Page Title

Speedtest от Ookla - Глобальный тест скорости широкополосного доступа

Scan Type

public

Language

🇷🇺

Russian

(80% confidence)

Category

technology software

(63%)

Domain Information

You're looking at domain 'cs001-5ef.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'cs001-5ef'. The registrable portion 'pages' spans 5 characters split between two vowels and 3 consonants. Segmentation suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cs001-5ef.pages.dev/ru

Page Load Overview

2.88s
Total Load Time
162
HTTP Requests
56
Domains
3.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:80%
Script Type:Cyrillic
HTML Lang Attribute:ru
Text Length:3,876 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software63% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
63%
documentation technical
58%
government public service
31%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3634.120.133.55Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
2104.18.26.193United States
AS13335CLOUDFLARENET
23.164.206.24United States
AS16509AMAZON-02
269.173.144.165Germany
AS26667RUBICONPROJECT
223.56.202.65Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
218.202.183.91Dublin, Leinster, Ireland
AS16509AMAZON-02
2104.18.87.42United States
AS13335CLOUDFLARENET
2104.20.22.97United States
AS13335CLOUDFLARENET
213.33.235.15New York, New York, United States
AS16509AMAZON-02
2172.66.166.119United States
AS13335CLOUDFLARENET
16264--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12F4409B3A1B8035D914B978DEEB67B24222E70EFBA8549C4B75D0E646B5BCE4FC03540

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/lkbLJdh4yvIs0xE6J/CgbcVKzoKeMXKLnpI6dDcPXE+ymj6aslNzlbsjq0Aok3l:WprbIbagbcVMaWUZD+3UbwnZGsOht29Q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:267583:gCVAMQ4osI1qEjBVy0kyiJBQUcXKYQQDIKZAAxdIRQCEQBCHgO4R5eERAOuCSHoMENDEZhJ0A4JJAMJcUCADTQBssI6CYRAx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01010101010501ff
Perceptual Hash:aa55ad55ab44b649
Difference Hash:05050d0d0d0dad0d
Wavelet Hash:07010f010f0f3fff
Color Hash:#2dd25e

Other Hashes

Crop Resistant:05050d0d0d0dad0d,06010c0d0d0c0c0d

Scan History

Scan history not available

Unable to load historical scan data