ScanMalware.com

Security Scan Report: dustswap.pages.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4fd6de16-d51d-4b09-b0ab-1360394fb5dcDomain and IP registration (RDAP)/api/v1/rdap/4fd6de16-d51d-4b09-b0ab-1360394fb5dcHow often this domain was scanned/api/v1/domain/stats/dustswap.pages.devScan history for this domain/api/v1/domain/history/dustswap.pages.dev?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 22 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://dustswap.pages.dev/app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Free pages.dev subdomain running a 'validate/connect wallet' flow that asks users to generate and save a mnemonic/QR code, the classic wallet-drainer phishing pattern; domain also carries a phishing threat-intel report. Avoid and report.

Risk Factors (5)
Primary domain flagged as phishing by threat intelligence
Wallet-drainer pattern: prompts to connect/validate a wallet and generate/save a mnemonic or QR code (seed-phrase harvesting shape)
Subdomain on free Cloudflare Pages hosting with unknown true age
Unranked / no established reputation for a page claiming to be a decentralized wallet protocol
IDS phishing alert observed (mirrored website comment)
Domain age information unavailable

Details

Page Title

Home | Mainnet Sync app

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'dustswap.pages.dev' is registered and includes subdomain 'dustswap'. The core label 'pages' covers 5 characters holding two vowels versus three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dustswap.pages.dev/app/

Page Load Overview

0.93s
Total Load Time
389 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,130 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
54%
cryptocurrency blockchain
52%
documentation technical
49%
government public service
28%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
224--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12522C86B65F3073260476685636FDF28BEE58103A20AC5F07AEC43C54FD6E42859B38D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:9JGGGdNf6CbkPMnzDyRLyz20J94oAieiLSEZ+Y2l57:jGdNCCbkUnz81E2pieiOvP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10533:OAkbWCBARADGgojWgAwlhCEhAIiIYZIDWpPgQEpcgEasINJDgiiibgQ0DEtkQbIGBL5olwqAQ8USJCgAgAhAhIcQKAARCAhC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000000000ffff
Perceptual Hash:880ab522b7b719dd
Difference Hash:c53171317110ab2a
Wavelet Hash:031838183c18ffff
Color Hash:#931f7e

Other Hashes

Crop Resistant:010122aaaa2a2a22,c431717131713115

Scan History

Scan history not available

Unable to load historical scan data