Security Scan Report: switch-mas1-btwebmail.pages.dev

Redirected to:
https://asx-indexbt-switch1.vercel.app/?./index-rui.jsp?v=2.32.0#app/m...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://switch-mas1-btwebmail.pages.dev/?.https://dry-meadow-7114.fly.dev/

Effective URL:
https://asx-indexbt-switch1.vercel.app/?./index-rui.jsp?v=2.32.0#app/m...
Redirected

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Dead Vercel 404 page served on a webmail-themed redirector host; no forms, no content, no malware or Indicators of Compromise. Suspicious naming alone, nothing malicious delivered.

Risk Factors (3)
Webmail-themed subdomain on a free hosting platform with unknown creation date, redirecting to an unrelated registrable domain
Cross-domain redirect chain carrying a supplied external URL parameter, a pattern frequently used by phishing-kit staging redirectors
Hosting platform commonly abused for throwaway pages, with no ranking or reputation attributable to this specific tenant
Safety Factors (4)
No forms of any kind - nothing on the page harvests credentials, payment data or personal information
Final page is the hosting provider's generic 404 / deployment-not-found error, containing no third-party scripts or dynamic behavior
No Indicators of Compromise, no YARA malware matches, no known phishing kit identified in the roster
No cross-origin credential exfiltration detected; no obfuscated JavaScript with a network sink
Domain age information unavailable

Details

Page Title

404: NOT_FOUND

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'switch-mas1-btwebmail.pages.dev' is registered and includes subdomain 'switch-mas1-btwebmail'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside 3 consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://switch-mas1-btwebmail.pages.dev/?.https://dry-meadow-7114.fly.dev/

Page Load Overview

0.79s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:198 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
59%
government public service
46%
technology software
34%
news media journalism
32%
healthcare medical
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.66.45.12Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
064.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0172.66.46.244Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
34--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144F1DA9170653A3EF6338922189B611D313CE007ED275ECA998A45F09ADE5E23A7FD81

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:G7e9POh8/QBFytD7uYjZ52A7XOuT24gEcy5m:SuGh84BFy5719gkXOi2ocIm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7940:YAmOElhCguG4NCaKQGWwAJxEgyLBAc4tBEBahRBJAzgYiEGmECjAGTIICIoiCgWNBiLAMESIgEQyfCEAhkTFRSkEBAHCYAG4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:b389cccc3333cccc
Difference Hash:0000000c0c00000c
Wavelet Hash:fcfcfce4243c3820
Color Hash:#bfbb40

Other Hashes

Crop Resistant:0000000c0c00000c

Scan History

Scan history not available

Unable to load historical scan data