Security Scan Report: linea-vote.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 8 domains to perform 9 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://linea-vote.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake Linea site on pages.dev using copied branding, an airdrop 'bonus allocation' lure and obfuscated scripts hiding known-attacker RPC hosts - a crypto wallet-drainer pattern. Do not connect a wallet.

Risk Factors (6)
Brand impersonation of Linea on a non-official pages.dev subdomain
Obfuscated JavaScript concealing known-attacker RPC hosts
Third-party ClearFake-reported resource loaded by the page
Fake voting/airdrop bonus-allocation incentive to harvest user actions
Blockchain RPC connections combined with DeFi brand impersonation (wallet-drainer pattern)
Threat-intel phishing report on the primary domain
Domain age information unavailable

Details

Page Title

Linea: The L2 Where Ethereum Wins

Scan Type

public

Domain Name Analysis

The domain 'linea-vote.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'linea-vote'. Count 5 characters in 'pages' with two vowels and 3 consonants. Word splitting yields one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://linea-vote.pages.dev/

Page Load Overview

1.73s
Total Load Time
938 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,005 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain92% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
92%
forum community discussion
58%
cryptocurrency
30%
technology software
26%

Detected Features

OG: page

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.66.47.204Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
054.155.153.118Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
0108.133.212.217Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
0104.26.8.35Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.16.248.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
08.8.4.4Google · CDNWestfield, Massachusetts, United States
AS15169Google LLC
045.9.149.116Amsterdam, North Holland, Netherlands
AS49447Nice IT Services Group Inc.
0172.66.44.52Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.72.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
910--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F7E5FADE6FB496A64C8803D7FFF9F149186191FDCE208DD8F25E0978B6807A82C41AD5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:IdVj47v/n32Q+NKlEMf9DNVc5eu8MZ4uvBuLoPKASuv3:InQn8QEMFPu8MZ44u8PEa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3203594:KyEaUCwCAWAhJOSWNgSAkQTo4oxFKUJJiAoAIaVAqigWDgMBSqWiMwrIpcAAVIVRCAFLooEBRFJCECRZhADAQkLQH2WJICNL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181818181ffffff
Perceptual Hash:ef6f90903e94943c
Difference Hash:2b0b2323332b339e
Wavelet Hash:8181818181ffd7ff
Color Hash:1e000000038

Scan History

Scan history not available

Unable to load historical scan data