ScanMalware.com

Security Scan Report: dx-15o.pages.dev

Site favicon
Submitted: Dec 27, 2025, 1:29:10 PMCompleted: Dec 27, 2025, 1:30:23 PMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 5 countries across 15 domains to perform 68 HTTP transactions. The main domain is dx-15o.pages.dev and was registered NaN years ago.

Submitted URL: https://dx-15o.pages.dev/it

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

Site mimics Ookla Speedtest on an unranked domain; high‑risk phishing.

Risk Factors
Brand impersonation on an unrelated, unranked domain
Unranked domain presenting a major service (Ookla Speedtest) without official branding
Suspicious OCR text suggesting account creation ("Creaun Account")
Domain age information unavailable

Details

Page Title

Speedtest di Ookla - Il test globale per la velocità della tua banda larga

Scan Type

public

Language

🇮🇹

Italian

(80% confidence)

Category

technology software

(56%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'dx-15o.pages.dev' is registered and includes subdomain 'dx-15o'. The registrable portion 'pages' spans 5 characters containing two vowels alongside 3 consonants. Splitting it apart reveals 1 word: pages. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dx-15o.pages.dev/it

Page Load Overview

2.02s
Total Load Time
142
HTTP Requests
55
Domains
3.4 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:it
Text Length:3,772 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software56% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
56%
documentation technical
36%
download file sharing
35%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1613.226.244.23Netherlands
AS15169
9142.250.110.84United States
AS15169GOOGLE
9142.250.185.234France
AS30982
9146.75.122.219Frankfurt am Main, Hesse, Germany
AS54113FASTLY
918.245.31.65United States
AS16509AMAZON-02
923.56.202.65Ireland
AS16625
9178.250.1.12France
AS44788Criteo Technology SAS
9142.250.185.162United States
AS15169GOOGLE
923.36.162.6Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
9104.18.86.42United States
AS13335CLOUDFLARENET
14215--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18C1408F162B8536D908B879DEF36A618770FE0A7F99649D5B79D8B644B83CE0EC03404

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:PBPjqTarQl4yv+s0xE6J/CgbcVKzoKeMXKLnpI6dDcPXE+ymj6aslNzlbsjq0Ao0:9Wb+bagbcVMaWUZD+3UbwnZ730h9v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195838:lEAUaZNVARpogIBAAbCJQBWgjhCAapLQoucVB5sEIikIjSGIQQFw0HSyJwhkAsacyBgQgRYBuSCDCdQuMwh0gCCBg8BhE4hY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:6fb9ddfdfdfd1101
Perceptual Hash:aad533f30ad132d1
Difference Hash:9935353131352131
Wavelet Hash:7f3f3d3d39190101
Color Hash:#442d86

Other Hashes

Crop Resistant:2d2d2d2d2c2d2ded,9935353131352131

Scan History

Scan history not available

Unable to load historical scan data