Website safety scanner
Is pages.dev legit?
Be careful with this website
Our scanner found several signals that may make pages.dev risky for visitors. Avoid payments, logins or downloads unless you can verify the site independently.
High caution
Our verdict
Our automated scanner gives pages.dev a trust score of 15/100. Stronger trust signals include Abuse confidence score 0/100, Certificate valid with 86 days remaining, content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy. The main warnings or unknowns are 1 malicious detections, openphish, WHOIS creation date unavailable.
This is an automated trust analysis. It checks technical signals, public threat feeds, domain records and website configuration. It cannot prove intent, but it helps you decide whether extra caution is needed before you log in, pay, download files or share personal information.
Website preview
Preview image generated from the scanned homepage. Visual appearance can change after the scan.
What to watch for
- VirusTotal malicious detections -17 1 malicious detections
- Phishing or malware list match -40 openphish
- Unknown domain age -5 WHOIS creation date unavailable
- No MX records -3 No mail exchange records found
- Missing SPF record -4 No SPF policy found
- Missing DMARC record -4 No DMARC policy found
- Redirects to another domain -10 https://pages.cloudflare.com
What this means for you
- Browsing the homepage: review normally, but watch for browser warnings or forced downloads.
- Entering passwords: only continue if the domain clearly matches the official website.
- Payments: verify company details, refund policy and payment method first.
- Downloads: avoid files when threat intelligence or reputation warnings are present.
Is pages.dev safe to use?
pages.dev currently has a low trust profile in our automated analysis. The score combines blacklist results, SSL status, DNS configuration, WHOIS data, redirect behavior, security headers, domain heuristics, IP reputation and popularity signals.
A high score does not guarantee that a website is legitimate, and a low score does not prove criminal intent. The purpose of this report is to show the technical evidence so visitors can make a more informed decision.
Brand and domain checks
- Brand-like pattern
- No common pattern detected
- Redirects elsewhere
- Yes
- Final URL
- https://pages.cloudflare.com
- Punycode detected
- No
Contact and company signals
- About page
- No
- Contact page
- Yes
- Privacy policy
- Yes
- Terms page
- Yes
- Refund policy
- No
Payment risk indicators
- Risk terms found
- No data available
- External links
- 31
- Recommendation
- Do not enter payment details, passwords or personal information unless you can verify the website through an official source.
Trust signals found
- AbuseIPDB clean IP score Abuse confidence score 0/100
- Valid SSL certificate Certificate valid with 86 days remaining
- Good security headers content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy
- Company information pages found contact page, privacy policy, terms page
- Recognized website popularity Tranco rank #301
Website popularity
- Rank source
- Tranco
- Tranco rank
- 301
- Estimated visitors
- 5M-50M monthly visits
Additional threat intelligence
- AlienVault OTX pulses
- 0
- OTX reputation
- No data available
- AbuseIPDB score
- 0/100
- AbuseIPDB reports
- 0
- IP owner / ISP
- Cloudflare, Inc.
VirusTotal details
- Malicious detections
- 1
- Suspicious detections
- 0
- Harmless engines
- 62
- Undetected engines
- 28
- Reputation
- -44
- Community votes
- harmless: 6, malicious: 21
- Categories
- No data available
Detected threats by engine
| Engine | Category | Result | Method |
|---|---|---|---|
| Chong Lua Dao | malicious | malicious | blacklist |
View all stored VirusTotal output
How this compares to trusted websites
- Trusted websites usually use a valid SSL certificate and keep it renewed.
- They often have clear contact details, company information, privacy terms and refund policies.
- They rarely appear on malware, phishing or abuse intelligence lists.
- They use stable DNS, email authentication and predictable redirects.
Sources checked
Technical safety checks
These checks explain the underlying signals behind the verdict. They are useful when you want to know whether a website has a stable domain history, a valid SSL certificate, normal DNS records and expected security configuration.
Domain information
- Domain
- pages.dev
- Registrar
- Domain age
- No data available
- Created
- WHOIS privacy
- No
SSL details
- Valid SSL
- Yes
- Issuer
- Google Trust Services
- Subject
- pages.dev
- Expires
- 2026-08-21T07:58:11+00:00
- Days remaining
- 86
HTTP checks
- HTTPS available
- Yes
- HTTP available
- No
- Status code
- 200
- Final URL
- https://pages.cloudflare.com
- Page title
- Cloudflare Pages
DNS records
- A records
- 104.18.20.135, 104.18.21.135
- MX records
- No data available
- Nameservers
- adi.ns.cloudflare.com, karl.ns.cloudflare.com
- SPF record
- DMARC record
Security headers
- Present
- content-security-policy, x-content-type-options, x-frame-options, referrer-policy, permissions-policy
- Missing
- strict-transport-security
Blacklist overview
- VirusTotal malicious
- 1
- Google Safe Browsing unsafe
- No
- URLHaus listed
- No data available
- OpenPhish listed
- Yes
- PhishTank listed
- No data available
Technical analysis
- IP address
- 104.18.20.135
- ASN / organization
- AS13335 Cloudflare, Inc.
- Hosting provider
- AS13335 Cloudflare, Inc.
- Location
- San Francisco, California, US
- High entropy score
- 2.322
- Suspicious TLD
- No
- Suspicious keywords
- No data available
Redirect chain
- https://pages.dev/
pages.dev safety FAQ
Is pages.dev a scam?
This automated report cannot make a legal accusation. It gives pages.dev a trust score of 15/100 based on the security and reputation signals available at scan time. Review the warnings, threat detections and technical checks above before using the site.
Why did pages.dev get this trust score?
The score is weighted from multiple signals, including threat-list matches, domain age, SSL status, redirects, DNS records, SPF/DMARC, security headers, suspicious keywords, IP reputation and popularity data.
Should I enter personal or payment information?
Do not enter payment details, passwords or personal information unless you can verify the website through an official source.
How often is this analysis updated?
The report is generated from stored scan data. When the automation script refreshes the domain, the page updates the score, threat intelligence, technical checks and popularity history.