Security Scan Report: vote-proposal-2a.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 9 domains to perform 12 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://vote-proposal-2a.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake Kaito voting portal on pages.dev: Critical EtherHiding malware IDS alerts plus an obfuscated script hiding a known-attacker BSC host. Wallet-drainer pattern — do not connect a wallet.

Risk Factors (5)
Brand impersonation of Kaito on a non-Kaito pages.dev subdomain with claim-jumping reward language ('$KAITO Rewards', 'bonus allocation upon launch')
CRITICAL IDS malware alerts (EtherHiding exfiltration, x4)
Obfuscated script concealing a known-attacker domain (bsc.blockrazor.xyz) used as a network sink
EtherHiding / smart-contract-hosted payload pattern combined with BSC RPC traffic indicates a wallet-drainer setup
Free-hosting subdomain with unknown creation date and no ranking, used for a purported official crypto voting portal
Domain age information unavailable

Details

Page Title

Yapper Voting Portal

Scan Type

public

Domain Name Analysis

The domain 'vote-proposal-2a.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'vote-proposal-2a'. Count 5 characters in 'pages' split between two vowels and 3 consonants. Splitting it apart reveals 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

XK KAITO © Pre-TGE Arena %@ Info Markets Arena @ Project Leaderboards Yaps EE] Feeds & Capital Launchpad + fi Kaito Earn 46 Trading Rewards ® Voting Portal $KAITO Rewards Date Proposal All a...

Page Load Overview

1.25s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:356 chars
Detector Agreement:88%

Website Classification

Primary Category

social media network54% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
54%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
152.222.136.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
154.155.153.118Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
1172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18.8.8.8Google · CDNUnited States
AS15169Google LLC
1104.16.249.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1176.34.83.64Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
1104.26.9.35Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
034.243.87.28Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
0104.26.8.35Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1215--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19DF5F1F46564A03FBC17F0FCE29CB80CAD19F1A3DE614398F99D611563E6AF50926B08

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:bXnqsomVvsjhD0sewdpspbfusUAETZFEsOPmEs4dDEsWnUEsEPDrzO:R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3385691:zneoyVCEKQGomKdwiIkgUmoorYBkkPEAKkBBwrIUMoJwBCABwDmydQAKBQAiAAABSZ6aqKBhqtjOAIOxQBICUDFM4QgTwarE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:808888989c888080
Perceptual Hash:fff6660199662099
Difference Hash:041818301a1a0400
Wavelet Hash:84bebe9cbe96a280
Color Hash:38003000280

Other Hashes

Crop Resistant:041818301a1a0400

Scan History

Scan history not available

Unable to load historical scan data