ScanMalware.com

Security Scan Report: pandaproxy.pages.dev

Redirected to:
https://pandaproxy.pages.dev/
Site favicon
Submitted: Sep 27, 2026, 7:37:03 PMCompleted: Sep 27, 2026, 7:37:38 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ec11c937-a237-4b17-83c3-1403c9b3dcf6Domain and IP registration (RDAP)/api/v1/rdap/ec11c937-a237-4b17-83c3-1403c9b3dcf6Certificate Transparency/api/v1/ct/pandaproxy.pages.devHow often this domain was scanned/api/v1/domain/stats/pandaproxy.pages.devScan history for this domain/api/v1/domain/history/pandaproxy.pages.dev?limit=15

This website contacted 30 IPs in 2 countries across 12 domains to perform 25 HTTP transactions. The main domain is pandaproxy.pages.dev and was registered 7 years ago.

Submitted URL: http://pandaproxy.pages.dev/

Effective URL:

https://pandaproxy.pages.dev/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Self-branded proxy/new-tab utility on pages.dev with no forms, no impersonation, and no Indicators of Compromise, YARA, or phishing IDS hits. Only informational Cloudflare-domain IDS noise. Low risk.

Risk Factors (3)
Hosted on shared pages.dev platform subdomain whose actual creation date cannot be verified
4 Function() constructor calls in JavaScript (dynamic code generation) — weak signal, common in proxy/utility tooling
Unranked domain with no established reputation
Safety Factors (5)
No credential, login, or payment forms present anywhere on the page
No cross-origin form submission and no credential exfiltration detected
Self-branding only: page presents 'PandaProxy', matching its own domain — no brand impersonation
No threat-intelligence matches, no malware YARA patterns, no known-kit roster hits
Content is a simple proxy settings/new-tab utility with no obfuscated network sink
Domain age information unavailable

Details

Page Title

New Tab

Scan Type

public

Domain Name Analysis

You're looking at domain 'pandaproxy.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'pandaproxy'. The second-level label 'pages' is 5 characters long containing 2 vowels alongside 3 consonants. Tokenizing the label suggests one word: pages. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://pandaproxy.pages.dev/

Page Load Overview

0.52s
Total Load Time
353 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:176 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
43%
documentation technical
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.208.5United States
AS16509Amazon.com, Inc.
0192.178.183.95United States
AS13335Cloudflare, Inc.
0104.21.16.247United StatesUnknown
0192.178.183.138United StatesUnknown
0142.251.152.119United StatesUnknown
0142.251.127.94United StatesUnknown
0142.251.20.113United StatesUnknown
0142.251.150.4United StatesUnknown
2530--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14281B96150F41A3B919B8299AA91E70E7EE1D60BCBEF590436FC17D08FC3DE5C807846

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:n8Ke5NzG5+5bWJdGyQateE+dPoOWiW1bwJrNNig2/D:n8/5FG+bWJdlFteEx9dbwJrNNig2r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3960:Y0BgCAAIAARNARAQEgQIAFCIGEkKAIEJBJAAjiBgBhAKAFAAACAAAAAACBYQIAACABBlIAOjAIAoQBUAkAAIEgMAASQIAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fcfcfaf8f8f0f0
Perceptual Hash:ca176e292d376916
Difference Hash:0a05050a02030105
Wavelet Hash:00fcf4f0f8f0f0f0
Color Hash:#87c59c

Other Hashes

Crop Resistant:0105080203030505,0000000001219600,1e073b7d3d090703,3c2e237199193917,a58103070e183163,250d0e4de5c64666

Scan History

Scan history not available

Unable to load historical scan data