Security Scan Report: pendle-finance.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 15 IPs in 3 countries across 17 domains to perform 155 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://pendle-finance.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Firebase-hosted clone of the Pendle DeFi protocol flagged as a wallet drainer; brand impersonation plus critical EtherHiding exfiltration IDS alerts. Do not connect a wallet.

Risk Factors (5)
Impersonation of the Pendle brand on a non-official hosting-platform subdomain
Threat-intel match (single-source, unverified) classifying the domain as a wallet drainer
Repeated CRITICAL IDS alerts for EtherHiding exfiltration
Blockchain RPC / smart-contract interaction on an impersonating page, consistent with wallet-draining
Unknown-age free subdomain with no reputation behind a major brand claim
Domain age information unavailable

Details

Page Title

Pendle - Liberating Yieldother network

Scan Type

public

Domain Name Analysis

The domain name 'pendle-finance.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'pendle-finance'. The core label 'firebaseapp' covers 11 characters split between five vowels and 6 consonants. It segments into 3 words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pendle-finance.firebaseapp.com/

Page Load Overview

N/A
Total Load Time
8.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,513 chars
Detector Agreement:75%

Website Classification

Primary Category

cryptocurrency blockchain78% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
78%
technology software
75%
social media network
71%
documentation technical
62%
forum community discussion
35%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
10142.250.154.95Google · CDNUnited States
AS15169Google LLC
10104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.250.154.94Google · CDNUnited States
AS15169Google LLC
10104.20.41.95Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1099.80.124.124Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
10172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
10104.20.35.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
015--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18B24A412BDF30436341F61AF16E7570D26A0A283C905FBE879FC41948FA9DA17EE3658

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ObjRrYcf9zM5BRGJdrcutB47hlQKRAbrajWAqEVwFoerXb9GEGJosun5IrG8I86K:2FmhBNU7hT0+0/M9ob

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:211287:UWQAM0KJwAEyRAjAACKSIQCAZyu3lINJADQgAAygBPCQB4eCBAUBRESwACQWMkJIJyAhsBAys+KYAASEUIEHZUgQgBHHLEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01f77f1701000000
Perceptual Hash:87c75738383cc4c7
Difference Hash:4fcdc7af1fc5e17d
Wavelet Hash:23ffff1f01013107
Color Hash:#1f5393

Scan History

Scan history not available

Unable to load historical scan data