Security Scan Report: prime-bot-verify.pages.dev

Site favicon
Submitted: Oct 14, 2026, 10:25:05 PMCompleted: Oct 14, 2026, 10:25:39 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Fake 'human verification' page on a free pages.dev subdomain that pushes users to Discord with pseudo-system/biometric text. No forms, Indicators of Compromise or malware found, so not confirmed malicious — but the deceptive lure pattern warrants caution.

Risk Factors (3)
Deceptive fake 'human verification' gateway whose only instruction is to continue verification in Discord — a known scam lure pattern
Fake system/biometric/decryption messaging and obfuscated binary text designed to mislead users into believing a security check is occurring
Hosted on a free platform subdomain with unknown creation age, so no reputation or age signal can be trusted
Safety Factors (5)
No credential, login or payment form present (password fields = 0, payment fields = 0, total forms = 0)
No Indicators of Compromise or threat-intelligence matches
No JavaScript malware (YARA) patterns, no known malicious kit, no hidden iframe or keylogger behavior
No cross-origin form submission or credential exfiltration detected
Network IDS alerts are only informational notices about Cloudflare pages.dev, not phishing/malware signatures
Domain age information unavailable

Details

Page Title

Human verification

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'prime-bot-verify.pages.dev' is registered, featuring subdomain 'prime-bot-verify'. Its registrable label 'pages' stretches across 5 characters containing two vowels alongside 3 consonants. Tokenizing the label suggests 1 word: pages. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://prime-bot-verify.pages.dev/

Page Load Overview

0.30s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:367 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
55%
documentation technical
40%
healthcare medical
40%
adult content
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.66.47.16Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.44.240Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
55--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11FC2B52183103479F31A83FEB230A55D302955CBB30964447ECA2639F7699DB9F7B2DA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:qcdZgP3yaMFdrdRBI+LVOBDpyIdomFHu1PguxOSguxTCrhguxKoUeL8aBlByqA/Q:TdZgPwdRBIOOBRdFu1K6CrIoUQt8qkC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26867:JEBSHYC6WCahABEogAUAFAIQFGGChuEzQRMKA8FBQpQQTSEUQEYABIMIMBPI21ivRYRSqIQ7KEgA9JpANLlMEhEiUgALBCoE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0030181818181c18
Perceptual Hash:8c662733d99931d9
Difference Hash:3361f1b2b371f1f1
Wavelet Hash:00383d3d3d3c7c3d
Color Hash:#9887c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data