ScanMalware.com

Security Scan Report: flare-mainnet.pages.dev

Submitted: Apr 10, 2026, 11:14:12 PMCompleted: Apr 10, 2026, 11:16:56 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 458 HTTP transactions. The main domain is flare-mainnet.pages.dev and was registered NaN years ago.

Submitted URL: https://flare-mainnet.pages.dev/metamask.io/restore.html

AI Security Verdict

Moderate Risk

Confidence: 94%

5
Risk Score

Page impersonates the Flare wallet brand, hosts a password‑only form, and resides on an unranked, newly‑created subdomain – high risk of credential phishing.

Risk Factors
Brand impersonation (brand name in meta tags, domain mismatch)
Credential harvesting form (password‑only field)
Unknown subdomain age on a hosting platform
Unranked domain reputation
Hosting on generic pages.dev subdomain
Safety Factors
Established domain (2054 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Flare Wallets | Flare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(89%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'flare-mainnet.pages.dev' is registered; it also runs on subdomain 'flare-mainnet'. Count 5 characters in 'pages' containing two vowels alongside three consonants. It segments into 1 word: pages. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://flare-mainnet.pages.dev/metamask.io/restore.html

Page Load Overview

90.14s
Total Load Time
801
HTTP Requests
3
Domains
266 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:10,852 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
89%
cryptocurrency blockchain
87%
finance banking
79%
documentation technical
64%
cryptocurrency
30%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
267142.251.14.95United States
AS15169Google LLC
267147.93.42.12Boston, Massachusetts, United States
AS47583Hostinger International Limited
267188.114.96.3United States
AS13335Cloudflare, Inc.
8013--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17A95C538E332D05DAA27BB7BFDA81A259010DE0BECC661C43C7E42891BF19F675149E5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:vKui1bPMmPMYgPCFb+WPMCgPCFb+vgPCFb+egPCFb+ePMcgPCFb+hPMu9:QbP9PfgPCZPHgPCMgPCNgPC3P9gPCGPv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1988684:IuJwCsWCcRQWlAB7MliAMQUiNQhuAowEgAgjo4DAkAggFDYpEYnBCfmzVhMAQFKSFUoBhFCiACZAsSaoCcMmODgB0mAQAXEK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f7f3f3f7f3f7f7f
Perceptual Hash:80f8f800fc07fff0
Difference Hash:c0c0c0c0c0c0c0c0
Wavelet Hash:7070303030303030
Color Hash:#68862d

Other Hashes

Crop Resistant:c0c0c0c0c0c0c0c0

Scan History

Scan history not available

Unable to load historical scan data