Security Scan Report: silver-robin-a9fb.pages.dev

Redirected to:
https://silver-robin-a9fb.pages.dev/install
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://silver-robin-a9fb.pages.dev/ja-jp/about

Effective URL:
https://silver-robin-a9fb.pages.dev/install
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Self-branded Nova Proxy Cloudflare Worker setup page; password fields create a local admin password, no impersonation or exfiltration. Sneaky-evasion advice and unknown-age subdomain keep it at moderate risk.

Risk Factors (3)
Password fields without a username on a shared-hosting subdomain of unknown age
Content explicitly coaches evasion of hosting-provider abuse detection for proxy/VPN use
Unranked, privacy-registered subdomain with no independent reputation
Safety Factors (5)
No Indicators of Compromise or threat-intel matches
No JavaScript malware (YARA) and no obfuscated JS network sinks
No cross-origin form action or credential exfiltration detected
Self-branded site (title/meta match its own domain); no third-party brand impersonation
Form is a local admin-password creation step, not a login capturing existing credentials
Domain age information unavailable

Details

Page Title

Setup

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'silver-robin-a9fb.pages.dev' is registered, featuring subdomain 'silver-robin-a9fb'. The registrable portion 'pages' spans 5 characters split between two vowels and three consonants. Word splitting yields one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://silver-robin-a9fb.pages.dev/ja-jp/about

Page Load Overview

1.11s
Total Load Time
116 KB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa
Text Length:4,056 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.66.44.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.47.40Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
72--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A034DF13364943A2327D095B086B72C7BB3AD36E34AD640DDB5972814DBEB38301B69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:3UUrQg4QwaYfELXYrBxGwS1fHbFX+2UEd:3n4QwaYfELXYrBxGwS1fbB+2L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41301:R4OgheaAQ7OMjESc0QUhCuCSBUCQuAgwI1iZYkRWAyIKZQIxQChyiLEEQeekDICEAJQqigh1+IwCQQxJAYEmCjmsuKkJEgTA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c2babab2bbfdb3f2
Perceptual Hash:cc7364bb6464336c
Difference Hash:1622226462286626
Wavelet Hash:00383830f9f9f9f1
Color Hash:#6ccee0

Other Hashes

Crop Resistant:1622226462286626

Scan History

Scan history not available

Unable to load historical scan data