ScanMalware.com

Security Scan Report: rabbywallet-evm.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/017b658a-61fc-46d0-82ac-99548366e7daDomain and IP registration (RDAP)/api/v1/rdap/017b658a-61fc-46d0-82ac-99548366e7daHow often this domain was scanned/api/v1/domain/stats/rabbywallet-evm.firebaseapp.comScan history for this domain/api/v1/domain/history/rabbywallet-evm.firebaseapp.com?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://rabbywallet-evm.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Lookalike Rabby wallet site on a free Firebase subdomain, flagged for phishing and prompting a wallet connect — brand impersonation of a crypto wallet, high risk of asset theft.

Risk Factors (4)
Impersonation of the Rabby wallet brand on a domain that is not Rabby's official site
Threat-intelligence phishing report on the primary domain (single-source, unverified)
Free instant-hosting subdomain (firebaseapp.com) with unknown creation date
Wallet-connect prompt on a lookalike crypto wallet site — typical drainer lure
Domain age information unavailable

Details

Page Title

Rabby Wallet — Next-Gen Cryptocurrency Wallet

Scan Type

public

Domain Name Analysis

The domain name 'rabbywallet-evm.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'rabbywallet-evm'. Count 11 characters in 'firebaseapp' containing five vowels alongside 6 consonants. Splitting it apart reveals three words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rabbywallet-evm.firebaseapp.com/

Page Load Overview

0.54s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,875 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain96% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
96%
technology software
65%
documentation technical
41%
government public service
36%
finance banking
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
51--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13992615190F122734187C2D4D771972B6F60C283E91B66A832FC4BE59FD3E41DA4B1AE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:rFDdxm8VTYAAt0MQ+OFQlCEzVhMfHooygKIbqBszYDzUGOLfmdGfu+NMhJGeKhKY:vMiwQ3LTuJhMt62v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20200:JQKIEwpEogeIZTfInDiCBEDBUwwnMAZiKBQYB7GALQGAABBQ5EsBBAOgKKbAAAGVCdpmEAAEjsoMECOemEQLEOpnkBgQBECE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:463d3d1919010119
Perceptual Hash:8a96b6363436b69c
Difference Hash:d4f1f1f1b1193131
Wavelet Hash:5f7f3d3d19090119
Color Hash:#4840bf

Other Hashes

Crop Resistant:464600020000200e,d4f1f1f1b1193131

Scan History

Scan history not available

Unable to load historical scan data