Security Scan Report: mainnethub-protocol.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 9 domains to perform 38 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://mainnethub-protocol.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Impersonates the WalletLink brand on a free firebaseapp.com subdomain and lures users into entering wallet private keys; linked to/loading wallet-drainer domains flagged by threat intel. Do not connect a wallet or enter keys.

Risk Factors (5)
Brand impersonation of WalletLink on a non-official domain
Solicitation of wallet private keys / seed phrase via on-page instructions
Two single-source wallet-drainer threat-intel matches linked to/loaded by the page
Free/shared Firebase subdomain with unknown page age and no domain reputation
Crypto-themed lure pages (Airdrop, Reward, Claim, Withdraw, Recovery) typical of drainers
Domain age information unavailable

Details

Page Title

WalletLink

Scan Type

public

Domain Name Analysis

The domain name 'mainnethub-protocol.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'mainnethub-protocol'. The core label 'firebaseapp' covers 11 characters containing five vowels alongside six consonants. Splitting it apart reveals 3 words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mainnethub-protocol.firebaseapp.com/

Page Load Overview

1.80s
Total Load Time
261 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,088 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software36% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
36%
finance banking
31%
cryptocurrency blockchain
27%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3104.18.4.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.199.108.133Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.251.20.101Google · CDNUnited States
AS15169Google LLC
3200.97.244.201United States
3162.159.152.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.161.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.5.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.139Google · CDNUnited States
AS15169Google LLC
3162.159.153.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3810--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19183091B19F3015A0C53D1E46B7A7A44BBA1E207CC0ADC8ABADE1251CF86EB56DD335C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:GbYZiPLM0eEHNGqZbuoQ0E0IDBGkjic1oWefV:Gcio0BHcZDBGWiYoJfV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:86244:iEwAPFigCoSQkIghEogxYHhAEQQ0IwplECJAzJqIAIjaAMWlgojIk7pEQDIt4iDEYBFIFpHQNBCaAHiQSAcIIQEbAyAQcsqS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181818181bdbdbd
Perceptual Hash:af3c96903495d5c5
Difference Hash:1d45434369696969
Wavelet Hash:85818181b5bdbdbd
Color Hash:#8c40bf

Scan History

Scan history not available

Unable to load historical scan data