Security Report: vote-proposal-a77.pages.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9e115b21-d118-4847-8c3f-1b19f9b2c964 Domain and IP registration (RDAP)/api/v1/rdap/9e115b21-d118-4847-8c3f-1b19f9b2c964How often this domain was scanned/api/v1/domain/stats/vote-proposal-a77.pages.dev Scan history for this domain/api/v1/domain/history/vote-proposal-a77.pages.dev?limit=15

This website contacted 12 IPs in 2 countries across 8 domains to perform 10 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://vote-proposal-a77.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake Pendle Finance site on a pages.dev subdomain with a wallet-connect lure, obfuscated script hiding a flagged host, and critical EtherHiding malware exfiltration alerts — a likely crypto wallet drainer.

Risk Factors (5)

Impersonation of Pendle Finance on an unrelated .pages.dev subdomain

Critical IDS malware alert: EtherHiding Exfil M2 (x4)

Obfuscated JavaScript concealing connection to known-attacker domain bsc.blockrazor.xyz

Blockchain RPC connections to flagged domains plus wallet-connect solicitation (wallet-drainer pattern)

Free instant-hosting subdomain with unknown creation date used to front a major DeFi brand

Domain age information unavailable

Details

Page Title

Dashboard | Pendle

Scan Type

public

Favicon Hash

MMH3: 1588867844

MD5: 75c5459442728da4ae742173e4835565

Domain Name Analysis

The domain 'vote-proposal-a77.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'vote-proposal-a77'. Its registrable label 'pages' stretches across 5 characters holding 2 vowels versus 3 consonants. Segmentation suggests one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

] Get Started v Markets Pools PT Looping Dashboard Swap Q nk Connect Wallet 88 Explore $PENDLE Rewards Date Proposal All active voters will gain a bonus allocation upon launch.

Page Load Overview

0.98s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,586 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency60% confidence

Type: dynamic

Method: structural

All Detected Categories

cryptocurrency

60%

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	172.66.46.208Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.66.45.48Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	176.34.83.64Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
0	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.26.9.35Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.16.248.249Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	8.8.8.8Google · CDN	United States	AS15169Google LLC
0	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	54.78.248.106Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
0	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	12	-	-