Within the developer-focused generic top-level domain (.dev), 'turnstile-egv.pages.dev' is registered with subdomain 'turnstile-egv'. Its registrable label 'pages' stretches across 5 characters split between two vowels and three consonants. Segmentation suggests 1 word: pages. No strong language cues emerged from the frequency lists.

html/ed/14/ed1467af-5450-4879-bf3d-2520580a40b6.html.gz

default-src 'none'; script-src 'nonce-hj4sxf1qp8LSCXx9' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

default-src 'none'; script-src 'nonce-gKe1aTnyibIgMwTZ' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

default-src 'none'; script-src 'nonce-UEeDtZSpQDEoH82h' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

default-src 'none'; script-src 'nonce-N06Dg15flmy2zlRO' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms

76f74cf8cbe686197a7d645ef726a987f02a1253716eb250b8f20b0ea3f1e51c

7d4601bfcc989814eb1b5948b0761e7faca8d19cef48fdd18e236794b2d01bde

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Abuse Team

CloudFlare, Inc.

pages.dev

Cloudflare Turnstile Example

✅ Low Risk - http://turnstile-egv.pages.dev/

Requests	IP Address	Location	AS Autonomous System
4	104.18.94.41	United States	AS13335CLOUDFLARENET
2	172.66.44.145	United States	AS13335CLOUDFLARENET
2	172.66.47.111	United States	AS13335CLOUDFLARENET
1	104.18.95.41	United States	AS13335CLOUDFLARENET
9	4	-	-

Security Scan Report: turnstile-egv.pages.dev

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History