Security Scan Report: makeup-1xs.pages.dev

Redirected to:
https://makeup-1xs.pages.dev/'%20+%20item%20+%20
Site favicon
Submitted: Sep 25, 2026, 11:11:20 PMCompleted: Sep 25, 2026, 11:12:01 PMpubliccompleted

This website contacted 19 IPs in 5 countries across 19 domains to perform 167 HTTP transactions. The main domain is makeup-1xs.pages.dev and was registered 22 years ago.

Submitted URL: https://makeup-1xs.pages.dev/'%20+%20item%20+%20'

Effective URL:

https://makeup-1xs.pages.dev/'%20+%20item%20+%20
Redirected

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Beauty-school content on a free-hosted, unranked pages.dev subdomain with a malformed cloned URL, 30 redirects, and outbound links to a reported phishing site and a wallet drainer. No credential forms, but the flagged outbound links and redirect abuse warrant caution.

Risk Factors
Outbound links to a reported phishing domain and a reported wallet-drainer domain on a page with unrelated beauty-school content
30 redirects (6 cross-domain) indicating obfuscated navigation
Free hosting subdomain with unknown creation date and no domain reputation
Broken template URL suggesting a cloned/scraped page
Domain age information unavailable

Details

Page Title

Главная страница

Scan Type

public

Domain Name Analysis

The domain name 'makeup-1xs.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'makeup-1xs'. The second-level label 'pages' is 5 characters long with two vowels and 3 consonants. Splitting it apart reveals 1 word: pages. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://makeup-1xs.pages.dev/'%20+%20item%20+%20'

Page Load Overview

6.48s
Total Load Time
15.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:100%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:8,776 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning84% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
84%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8194.48.203.181United Arab Emirates
AS205282Tilda Platform Cloud Services Co. L.L.C
895.181.182.182Perm, Perm Krai, Russia
AS210756EdgeCenter LLC
8104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
85.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
8104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
887.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
16719--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179440B71A541241B810748DEE0BDB7183369A39DC70B09E4F3E816BABFC6C726DB7589

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:udsmAa7vU4NNM/FlgGqLl16hM7DbgT6OvT4BiH+NAq66HYRiG:udsmAasZb4BiH+NBT4RiG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:278621:PIVP0RlsNEBkhAIAmCQRrQMAwWU5CQMiIOIHOxQAEAMgASWEFu4EDFwMsJNGiHoEEaqYAKNAgHgDmYIV2CiDCAYBAAAIIhwH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff440040000000ff
Perceptual Hash:b258af0d8d07bf12
Difference Hash:2b9d8d8c9dd5cccd
Wavelet Hash:ff444466444465ff
Color Hash:#3e931f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data