Security Scan Report: we-isy.pages.dev

Site favicon
Submitted: Jul 11, 2026, 4:51:56 AMCompleted: Jul 11, 2026, 4:53:04 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 3 countries across 6 domains to perform 22 HTTP transactions. The main domain is we-isy.pages.dev and was registered NaN years ago.

Submitted URL: https://we-isy.pages.dev////%22https:////6.at.atwola.com//adlink%7C5113.1%7C5043043%7C0%7C5112%7CAdId=11146745;BnId=1;guid=9slkin1gpn6fu&b=4&d=dsEdG7FtYFGGYz9oEjMo&s=4f&i=em3Lgw_lUX_mVsy6EwTm;itime=739915162;kvsecure-darla=4-10-0%7Cysd%7C2;kvsecure=true;kvmn=y963896142;kvy-bucket=mbr-push-untrusted-ar%2Cmbr-fido-1fa-login%2Cmbr-rcscore-thresh

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Page is a credential‑phishing site impersonating AT&T, confirmed by Safe Browsing and a cross‑origin login form.

Risk Factors
Cross‑origin credential exfiltration
Brand impersonation (AT&T) on mismatched domain
High JS obfuscation score with base64 encoding
Unranked domain on a hosting platform
Domain age information unavailable

Details

Page Title

Yahoo

Scan Type

public

Language

🇺🇸

English

(58% confidence)

Category

technology software

(75%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'we-isy.pages.dev' is registered and includes subdomain 'we-isy'. Its registrable label 'pages' stretches across 5 characters with two vowels and three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://we-isy.pages.dev////%22https:////6.at.atwola.com//adlink%7C5113.1%7C5043043%7C0%7C5112%7CAdId=11146745;BnId=1;guid=9slkin1gpn6fu&b=4&d=dsEdG7FtYFGGYz9oEjMo&s=4f&i=em3Lgw_lUX_mVsy6EwTm;itime=739915162;kvsecure-darla=4-10-0%7Cysd%7C2;kvsecure=true;kvmn=y963896142;kvy-bucket=mbr-push-untrusted-ar%2Cmbr-fido-1fa-login%2Cmbr-rcscore-thresh

Page Load Overview

1.49s
Total Load Time
22
HTTP Requests
6
Domains
191 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:58%
Script Type:Latin
Text Length:164 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
75%
social media network
71%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
487.248.119.251United Kingdom
AS203220Yahoo-UK Limited
487.248.119.252United Kingdom
AS203220Yahoo-UK Limited
4188.125.72.139Dublin, Leinster, Ireland
AS34010Yahoo-UK Limited
4144.160.19.173United States
AS797AT&T Services, Inc.
225--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12AD21AB5C476C57B120D0C8526F8EF257CAB520B9A4BBBD179AF8B096F40C6B850394E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:0bf1yHiszIplfIBcOoJBsThOzE1dvjAjGJB8eZLYbY/:05yHiA4lfIBcOoT68zE1dbx8qYbY/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29243:RBQogTSoIQAABDISiAzDQdDhSgYGECVjgUkBASgLAHBQY1EDATlBTCBmlFBChbKiApWFoOAR2YksUEZhUAEDEABkgBAYhoOE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ee6e6e6fefefefe
Perceptual Hash:f7238d8d2327898d
Difference Hash:ca2a4e4c320a0202
Wavelet Hash:7e60d8c0d8c0fcfc
Color Hash:#864a2d

Other Hashes

Crop Resistant:ca2a4e4c320a0202

Scan History

Scan history not available

Unable to load historical scan data