Security Scan Report: realtyx-co.pages.dev

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 22 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://realtyx-co.pages.dev/app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Threat intelligence flags the primary domain as a wallet drainer, and the page's own copy pushes a wallet 'validate/sync' flow ending in mnemonic/QR saving — the signature of a seed-phrase theft kit. Do not connect a wallet.

Risk Factors (5)
Primary domain flagged as a phishing wallet drainer in threat intelligence
Seed-phrase/mnemonic and QR 'validation' language consistent with a drainer kit
Anonymous free-subdomain hosting with no published ownership or company information
Unranked domain (< top 1M Cisco Umbrella) presenting itself as decentralized financial infrastructure
IDS phishing signature observed on the traffic
Domain age information unavailable

Details

Page Title

Home | Mainnet Sync app

Scan Type

public

Domain Name Analysis

The domain 'realtyx-co.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'realtyx-co'. The core label 'pages' covers 5 characters containing two vowels alongside 3 consonants. It segments into one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://realtyx-co.pages.dev/app/

Page Load Overview

1.24s
Total Load Time
389 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,130 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
54%
cryptocurrency blockchain
52%
documentation technical
49%
government public service
28%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7172.66.46.234Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.45.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
224--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12522C86B65F3073260476685636FDF28BEE58103A20AC5F07AEC43C54FD6E42859B38D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:9JGGGdNf6CbkPMnzDyRLyz20J94oAieiLSEZ+Y2l57:jGdNCCbkUnz81E2pieiOvP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10533:OAkbWCBARADGgojWgAwlhCEhAIiIYZIDWpPgQEpcgEasINJDgiiibgQ0DEtkQbIGBL5olwqAQ8USJCgAgAhAhIcQKAARCAhC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000000000ffff
Perceptual Hash:880ab522b7b719dd
Difference Hash:c53171317110ab2a
Wavelet Hash:031838183c18ffff
Color Hash:#d279a7

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data