Security Scan Report: projectmains.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 45 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://projectmains.netlify.app/wallet

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Crypto wallet phishing kit posing as MetaMask/Trust/Coinbase that harvests private keys, seed phrases and keystore passwords, exfiltrating them to dvfederalunion.com. Never enter wallet credentials here.

Risk Factors (5)
Requests cryptocurrency private keys, seed recovery phrases and keystore files — direct asset theft
Credential/payment data posted to an external, unrelated domain (dvfederalunion.com) rather than the hosting domain
Impersonation of multiple well-known wallet brands on a free Netlify subdomain
Disguised password field hidden from the rendered page and Unicode evasion in form fields
Single-source phishing threat-intel match on the primary domain
Domain age information unavailable

Details

Page Title

Welcome

Scan Type

public

Domain Name Analysis

You're looking at domain 'projectmains.netlify.app' on the application-focused generic top-level domain (.app) and includes subdomain 'projectmains'. The second-level label 'netlify' is 7 characters long holding two vowels versus 5 consonants. Segmentation suggests 3 words: net, li, fy. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://projectmains.netlify.app/wallet

Another page of the site in scan 7d8e49f3

Page Load Overview

5.73s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:763 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
71%
technology software
59%
finance banking
44%
cryptocurrency
30%
documentation technical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
963.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
9188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
935.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
9188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
455--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C083837608F311161843A4B43BE46E16ABA5E1078A0FDD657AED53D0CF87E949EE338C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uYhJFZYlY6YDYqYgXiGscu8nJGbFUFaCFaMFa2FaO9:Xin3C7DrR9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:84948:kgUkOUAqEiCIqYNkUDEq0fGRYIACaIhlBEwlMEoAvtAijQEIAYphIQkCaCVwAFBJE/JmaAwMACcKSDNMRC1EMEMHSaAiRKDz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c3c3c3c00
Perceptual Hash:cbd0349c30cd6dcb
Difference Hash:7169696969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#87a7c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data