Security Scan Report: lunar-willow-1523-f5b7ecf9.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 60 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://lunar-willow-1523-f5b7ecf9.pages.dev/de-de

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Unofficial pages.dev copy of a Cloudflare speed-test page. Brand/host mismatch is notable, but with no forms, no credential collection and no threat-intel, YARA or phishing IDS hits there is no concrete malicious signal.

Risk Factors (4)
Cloudflare-branded content hosted on an unofficial, randomly named pages.dev subdomain (brand/host mismatch)
Subdomain creation date unknown; anyone can publish on pages.dev, so the namespace lends no trust
Hostname is not a Cloudflare-controlled brand domain, so the Cloudflare claim cannot be verified from the URL
Speed-test page returns connection errors ('Unable to connect to website'), consistent with an unfinished or copied deployment
Safety Factors (5)
No forms, no password fields, no payment fields, no credential or cross-origin data submission
No Indicators of Compromise, no YARA malware matches, no obfuscated credential-exfiltration JavaScript
Content is a non-transactional utility (bandwidth measurement) with an on-page privacy notice
Cloudflare Pages is a legitimate developer hosting platform; the branding may come from Cloudflare's own public speed-test template rather than a phishing kit
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Internetgeschwindigkeitstest – Netzwerkleistung messen | Cloudflare

Scan Type

public

Domain Name Analysis

Domain 'lunar-willow-1523-f5b7ecf9.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'lunar-willow-1523-f5b7ecf9'. Its registrable label 'pages' stretches across 5 characters with two vowels and three consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lunar-willow-1523-f5b7ecf9.pages.dev/de-de

Page Load Overview

1.41s
Total Load Time
673 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:2,302 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
604--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C83B873C29221D964DBCF8862A4631C321AB205F0B744F4AB796A76DCC7DF355F4A88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:DivfVOJX8dizNgROamVcccccccccccccccccccc77777777766ZZZZZZZZggfffx:D+XmVcccccccccccccccccccc777777x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82824:AsCmBCwSBGDFAtQ0IVIADiNJAuATIAISGECAYSgpHZQADmIhl0UpwSaMDRwJgAKpzwERlIDEMRHxTclUIGjOxwUoKUKVEIgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8783c98983fbfff9
Perceptual Hash:bb3f86863b324b84
Difference Hash:6d661b1b12230043
Wavelet Hash:8183818183fbffb9
Color Hash:#a5c587

Other Hashes

Crop Resistant:6d661b1b12230043

Scan History

Scan history not available

Unable to load historical scan data