Security Scan Report: quest-unichs.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 8 domains to perform 19 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://quest-unichs.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake Unich airdrop on a pages.dev subdomain: brand impersonation plus wallet-RPC connections, a critical EtherHiding malware IDS alert, a phishing domain match and a malware-reported third-party host. Do not connect a wallet.

Risk Factors (6)
Impersonation of the Unich crypto brand on a non-official pages.dev subdomain
Wallet-drainer style Web3 wallet/RPC connections on a fake airdrop claim page
Critical IDS malware alert (EtherHiding Exfil) and external IP-lookup beaconing
Phishing threat-intelligence match on the scanned primary domain
Malware-reported third-party domain (elliptical-rabbit.icu) loaded by the page
Unverifiable fabricated social proof ('6,580,874 people joined') and urgency-driven 'Claim'/'Register to claim' funnel
Domain age information unavailable

Details

Page Title

Unich Airdrop Campaign & Earn Free Tokens

Scan Type

public

Domain Name Analysis

You're looking at domain 'quest-unichs.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'quest-unichs'. The second-level label 'pages' is 5 characters long split between two vowels and three consonants. Splitting it apart reveals 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://quest-unichs.pages.dev/

Page Load Overview

4.26s
Total Load Time
5.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,335 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network54% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
54%
cryptocurrency blockchain
54%
finance banking
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
135.158.194.167Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1104.18.19.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.20.35.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
13.67.163.17Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1913--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15EE523669902253F3D174AFAB3E6BE8C44207243CD239EE5F5DC61D08BCA6B61E6315C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:R2r2ni0uYUwEAUwRcYhejnj5XH5w2cmvbGEq8HAcjtv:A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3288701:SAAIFwQSdFqYlCUoUALCBQAKICEAAIAs5giZahAichJiOySgApmgEmBEuxRDiQAIwUgQMLIBURAABC4oJMg0sMlLQCBihCoA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01333f3b33192000
Perceptual Hash:8daf72786a6698c2
Difference Hash:27e6e2e6f6f2cfc3
Wavelet Hash:933b3f3b333b2028
Color Hash:#931f70

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data