ScanMalware.com

Security Scan Report: yuzhe-ert.pages.dev

Site favicon
Submitted: Dec 30, 2025, 8:15:02 AMCompleted: Dec 30, 2025, 8:16:00 AMpubliccompleted
Loading additional data...

Summary

This website contacted 19 IPs in 3 countries across 15 domains to perform 53 HTTP transactions. The main domain is yuzhe-ert.pages.dev and was registered NaN years ago.

Submitted URL: https://yuzhe-ert.pages.dev/sv

AI Security Verdict

High Risk

Confidence: 95%

8
Risk Score

High‑risk phishing site impersonating Ookla Speedtest; avoid and report.

Risk Factors
Malicious Indicator of Compromise on primary domain pages.dev
Brand impersonation of Ookla Speedtest on a non‑official domain
Unranked domain used to mimic a reputable service
Domain age information unavailable

Details

Page Title

Speedtest av Ookla - Det globala hastighetstestet för bredband

Scan Type

public

Language

🇸🇪

Swedish

(80% confidence)

Category

technology software

(81%)

Domain Information

The domain 'yuzhe-ert.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'yuzhe-ert'. Its registrable label 'pages' stretches across 5 characters holding two vowels versus three consonants. Segmentation suggests one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yuzhe-ert.pages.dev/sv

Page Load Overview

2.00s
Total Load Time
62
HTTP Requests
19
Domains
2.7 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:sv
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:sv
Text Length:3,477 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software81% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
63%
government public service
44%
download file sharing
35%
education learning
35%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.114.96.3United States
AS13335CLOUDFLARENET
334.120.133.55Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
3162.19.138.118Germany
AS20940
3142.250.185.202Unknown
AS16625
3104.18.86.42United States
AS13335CLOUDFLARENET
323.36.162.6Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
323.56.202.65Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
3178.250.1.12France
AS44788Criteo Technology SAS
318.245.31.65Unknown
AS14618
318.245.31.92United States
AS16509AMAZON-02
6219--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16F1408F162B8536D908B879CEF36AA18670FE0A7F99649D5B79D8F644B83CD0EC03414

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:z1g5SqB4yv6s0xE6J/CgbcVKzoKeMXKLnpI6dDcPXE+ymj6aslNzlbsjq0Aok3w7:adb6bagbcVMaWUZD+3UbwnZWpqN9Z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195465:qlAEaCYPIsAjDKfHWRoZc0Il7BjUFASDPSlAAwiAtJASA1mUGbCEBEAAiQgSIABWAYBmRIDjaFGhCNCMNkSAQhzMBDE0coDU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:6fb9ddfdfdfd1101
Perceptual Hash:aad533f30ad522d1
Difference Hash:9935353131352161
Wavelet Hash:7f1b1b1b3b1b0101
Color Hash:#cae06c

Other Hashes

Crop Resistant:2d2d2d2d2c2d2ded,9935353131352161

Scan History

Scan history not available

Unable to load historical scan data