Security Scan: WalletLink

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2c4f2d05-4b74-499c-b269-65deb247ae1f Domain and IP registration (RDAP)/api/v1/rdap/2c4f2d05-4b74-499c-b269-65deb247ae1fHow often this domain was scanned/api/v1/domain/stats/multi-xchange.firebaseapp.com Scan history for this domain/api/v1/domain/history/multi-xchange.firebaseapp.com?limit=15

This website contacted 4 IPs in 1 country across 4 domains to perform 39 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://multi-xchange.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'WalletLink' dapp page on a firebaseapp.com subdomain, flagged as a wallet drainer and carrying a Telegram-exfiltration bot token stealth pattern in its JavaScript. Do not connect a wallet.

Risk Factors (6)

Primary-domain threat-intel match for a wallet drainer (phishing)

CRITICAL YARA stealer pattern Telegram_Credential_Exfil in page JavaScript

Embedded Telegram bot token in site script enables data exfiltration to attacker-controlled chat

Impersonation of the WalletLink brand on a non-official firebaseapp.com subdomain

Unranked domain with unknown page creation date on a free shared-hosting namespace

Wallet 'connect' funnel presented as an open protocol without any verifiable official ownership

Domain age information unavailable

Details

Page Title

WalletLink

Scan Type

public

Domain Name Analysis

The domain 'multi-xchange.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'multi-xchange'. The core label 'firebaseapp' covers 11 characters split between five vowels and six consonants. Tokenizing the label suggests 3 words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.20s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,412 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

71%

cryptocurrency blockchain

42%

documentation technical

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
9	172.66.147.126Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.18.37.127Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.20.35.94Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
39	4	-	-