Security Scan: Web3 Dapp Resolver

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bc8e0771-0813-4a6c-b478-577b6b9d26e0 Domain and IP registration (RDAP)/api/v1/rdap/bc8e0771-0813-4a6c-b478-577b6b9d26e0 Certificate Transparency/api/v1/ct/nodexprotocol.firebaseapp.com How often this domain was scanned/api/v1/domain/stats/nodexprotocol.firebaseapp.com Scan history for this domain/api/v1/domain/history/nodexprotocol.firebaseapp.com?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 22 HTTP transactions. The main domain is nodexprotocol.firebaseapp.com and was registered 18 years ago.

Submitted URL: https://nodexprotocol.firebaseapp.com/

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

Fake 'Web3 Dapp Resolver / crypto rectification' site hosted on a free Firebase subdomain that pushes 'Import Wallet' and 'Connect Manually' — a wallet-drainer seed-phrase lure. Do not connect or import any wallet.

Risk Factors (5)

Requests users to 'Import Wallet' and 'Connect Manually' — the standard mechanism used by wallet drainers to obtain seed phrases/private keys

Presents itself as a crypto recovery/rectification authority, an archetypal social-engineering lure for asset theft

Hosted on an instant free subdomain (firebaseapp.com) that any party can publish to, with no attributable operator

Unranked and unverifiable — no Cisco Umbrella presence despite 'industry-leading' claims

Pretends to support MetaMask, Coinbase Wallet, Trust Wallet and many more through its own interface rather than directing users to those wallets' official apps

Safety Factors (5)

No credential/password/payment input fields were found in the parsed DOM

No Indicators of Compromise, YARA malware patterns, IDS alerts, or Safe Browsing hits were detected

No cross-origin credential exfiltration observed in captured JavaScript

Only external resources are Google Fonts (fonts.googleapis.com, fonts.gstatic.com)

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

Web3 Dapp Resolver

Scan Type

public

Favicon Hash

MMH3: 924790824

MD5: 44c3a939c75453bb96eecb402b42f4e2

Domain Name Analysis

The domain name 'nodexprotocol.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'nodexprotocol'. The second-level label 'firebaseapp' is 11 characters long holding 5 vowels versus six consonants. Tokenizing the label suggests 3 words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.12s

Total Load Time

788 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,694 chars

Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain63% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

63%

technology software

54%

documentation technical

38%

cryptocurrency

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
7	142.251.13.95Google · CDN	United States	AS15169Google LLC
7	142.251.110.94Google · CDN	United States	AS15169Google LLC
22	3	-	-