ScanMalware.com

Security Scan Report: purchases-blocksdags.pages.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cdc94d46-23de-4528-86a4-3a1ab7272687Domain and IP registration (RDAP)/api/v1/rdap/cdc94d46-23de-4528-86a4-3a1ab7272687How often this domain was scanned/api/v1/domain/stats/purchases-blocksdags.pages.devScan history for this domain/api/v1/domain/history/purchases-blocksdags.pages.dev?limit=15
This website contacted 29 IPs in 3 countries across 17 domains to perform 107 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://purchases-blocksdags.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake BlockDAG presale on a pages.dev subdomain, flagged as a wallet drainer by threat intel and by critical/high IDS malware and phishing alerts. Do not connect a wallet.

Risk Factors (6)
Wallet drainer threat-intel match on the primary domain
Critical IDS malware alerts for EtherHiding exfiltration
High-severity IDS phishing alerts for crypto wallet drainer JavaScript
Impersonation of the BlockDAG crypto brand on a non-official pages.dev subdomain
Wallet-connect / RPC interaction funnel designed to sign transactions for a purported coin presale
Referral bonus and presale urgency language typical of crypto investment fraud
Domain age information unavailable

Details

Page Title

Become a Part Of BlockDAG Network | Buy BDAG Coins & Miners

Scan Type

public

Domain Name Analysis

The domain 'purchases-blocksdags.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'purchases-blocksdags'. The registrable portion 'pages' spans 5 characters containing 2 vowels alongside three consonants. Word splitting yields 1 word: pages. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://purchases-blocksdags.pages.dev/

Page Load Overview

17.23s
Total Load Time
10.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,850 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain91% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
91%
social media network
83%
finance banking
83%
technology software
76%
documentation technical
74%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
395.101.23.99Akamai · CDNVienna, Vienna, Austria
AS20940Akamai International B.V.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.20.154Google · CDNUnited States
AS15169Google LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.70.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.29.72Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10729--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D4B4B77156466F2E111EF7B280F86EBE550900468C77BB74B7BC86ED8B3DB678484238

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:byapqaVfXR6tG62VsN+xEiKfLLK8O4yDfO:GJIU6O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:510020:4EISgcFyMjiYMR8lTCAlAIAJoQQrgEAgUOTxUOCgbAVgKhDRJDIAjqgiaAAQi/xElcFGQAJhIIDAJUITgHT4MEMYUtBCSgEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f00307c686e0e0e
Perceptual Hash:c36c3ce1c1ccce3a
Difference Hash:929fe1ccc8ccdc9c
Wavelet Hash:ff40307e686e0e0f
Color Hash:#1f5393

Other Hashes

Crop Resistant:cbcbe0c3c0c0c8c6,3b39b6661594294b,2b6b4c1191b195d5,33f3d2cdcdab5e5c,2a2acbc8cd882c29,d29ee1ccc8ccdc9c

Scan History

Scan history not available

Unable to load historical scan data