Security Report: 49-proposal.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/18044041-19ea-4c7b-8ba4-5650cc7a803f Domain and IP registration (RDAP)/api/v1/rdap/18044041-19ea-4c7b-8ba4-5650cc7a803fHow often this domain was scanned/api/v1/domain/stats/49-proposal.pages.dev Scan history for this domain/api/v1/domain/history/49-proposal.pages.dev?limit=15

This website contacted 11 IPs in 2 countries across 9 domains to perform 11 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://49-proposal.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake Stellar Development Foundation page on pages.dev using an XLM reward lure; obfuscated script loads a known-attacker blockchain host and CRITICAL EtherHiding exfiltration alerts fired. Wallet-drainer/malware distribution — avoid.

Risk Factors (6)

Brand impersonation of the Stellar Development Foundation on a mismatched, unranked host

Obfuscated script hiding a threat-feed-listed host (bsc.blockrazor.xyz) that is only visible after deobfuscation

CRITICAL IDS malware alerts for EtherHiding exfiltration

Blockchain RPC connections unrelated to the impersonated Stellar network

Airdrop/reward 'register' lure designed to prompt wallet interaction

Instantly-published shared hosting subdomain with no accountable operator

Domain age information unavailable

Details

Page Title

Stellar | About Stellar Development Foundation

Scan Type

public

Favicon Hash

MMH3: 418445482

MD5: d8e876b18f7b89821b80c742eff47b18

Domain Name Analysis

Domain '49-proposal.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain '49-proposal'. The second-level label 'pages' is 5 characters long split between two vowels and 3 consonants. Segmentation suggests one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

ZF Stellar —soutions Partners Developers Community Abt The Foundation SXLM Rewards Date Proposal All active voters will gain a bonus allocation upon launch. Register & Begin Voth (>) Our Mission....

Page Load Overview

0.76s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:11,379 chars

Detector Agreement:95%

Website Classification

Primary Category

cryptocurrency blockchain52% confidence

Type: spa

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

52%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	34.149.250.58Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	54.155.153.118Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
1	176.34.83.64Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
1	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.8.35Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.16.248.249Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	8.8.8.8Google · CDN	United States	AS15169Google LLC
1	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	11	-	-