Security Scan Report: mainnethub-protocol.web.app

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 1 country across 7 domains to perform 37 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mainnethub-protocol.web.app/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake 'WalletLink' page on a free hosting subdomain that tells users to enter wallet private keys to buy/claim funds and links to a reported wallet drainer — clear phishing lure.

Risk Factors (5)
Impersonation of the WalletLink brand on a non-official domain
Explicit solicitation of wallet private keys in page text
Outbound link to a domain reported as a wallet drainer
Free instant-hosting subdomain with no verifiable age or reputation
Disjointed crypto reward/claim/airdrop lure structure
Domain age information unavailable

Details

Page Title

WalletLink

Scan Type

public

Domain Name Analysis

Domain 'mainnethub-protocol.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'mainnethub-protocol'. The second-level label 'web' is 3 characters long with 1 vowel and 2 consonants. Breaking it apart gives one word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mainnethub-protocol.web.app/

Page Load Overview

75.22s
Total Load Time
259 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,088 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain65% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
65%
technology software
64%
gambling betting
47%
documentation technical
42%
finance banking
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3104.18.4.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.199.110.133Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.251.14.113Google · CDNUnited States
AS15169Google LLC
3200.97.244.201United States
3162.159.152.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.36.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.5.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.199.111.133Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.251.14.139Google · CDNUnited States
AS15169Google LLC
3712--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB83091B19F3015A0C53D1E46B7A7A44BBA1E207CC0ADC8ABADE1251CF86EB56DD335C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ybYZiPLM0eEHNGqZbuoQ0E0IDBGkjic1oWefV:ycio0BHcZDBGWiYoJfV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:86229:oRMjaUVR8Qh5hTcZICAgASRAGxmUPBW4FCYlAANJjFKGgGsADpoBCxYCIZdjEyoHGHAAFDwAJkcnZtKLqoIFslgucEBYQAJY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181818181bdbdbd
Perceptual Hash:af3c96903495d5c5
Difference Hash:1d45434369696969
Wavelet Hash:85818181b5bdbdbd
Color Hash:#35d22d

Scan History

Scan history not available

Unable to load historical scan data