Security Scan Report: public-sale-page.pages.dev

Submitted: Completed: publiccompleted
This website contacted 17 IPs in 2 countries across 10 domains to perform 65 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://public-sale-page.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake Gensyn $AI token-sale page on a free pages.dev subdomain with a phishing threat-intel match and connect-wallet drainer infrastructure — do not connect a wallet.

Risk Factors (5)
Brand impersonation of Gensyn / Gensyn Foundation on an unrelated pages.dev hostname
Phishing threat-intel match on the scanned primary domain
Connect-wallet + blockchain RPC infrastructure consistent with a wallet drainer
Payment solicitation (USDC/USDT) on a free, anonymous hosting subdomain of unknown age
Threat-intel phishing flag on the linked allocations domain
Domain age information unavailable

Details

Page Title

$AI Token Sale

Scan Type

public

Domain Name Analysis

The domain 'public-sale-page.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'public-sale-page'. The second-level label 'pages' is 5 characters long split between 2 vowels and 3 consonants. It segments into one word: pages. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://public-sale-page.pages.dev/

Page Load Overview

5.72s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,593 chars
Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain66% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
66%
finance banking
48%
e-commerce shopping
44%
government public service
43%
technology software
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.32.190Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
357.129.88.159Frankfurt am Main, Hesse, Germany
AS16276OVH SAS
3104.20.34.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.19.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.97Google · CDNUnited States
AS15169Google LLC
3104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6517--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T137E295A6D806EC220937DC9D103EAF3F90C5C83AD571841DB3ADCADB46A19774BE98C5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2g6ur5jLQrqwJtnvrqHePGTw8HInIpYKeB56ex4+jvhlhpUvjr1:1ZLDePGTw8HInIpYKeB56MrUX1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32972:wrgJIQJKEQoTzMCgBkABIG1MpcgTAFKpySCIColQIBpoiEAQRMVSAQwFwgpiDDodE0GJyRQMxJRxM0YEsDMUZooAWUUBAEBS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000fffff9f8
Perceptual Hash:ea37c095c46e374a
Difference Hash:c4414d4d92dee1c1
Wavelet Hash:ff000000fffff0f0
Color Hash:#2dd24e

Scan History

Scan history not available

Unable to load historical scan data