ScanMalware.com

Security Scan Report: mainnethub-protocol.web.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c498a9c8-6e27-44b9-a4d2-4076231b8d8bDomain and IP registration (RDAP)/api/v1/rdap/c498a9c8-6e27-44b9-a4d2-4076231b8d8bHow often this domain was scanned/api/v1/domain/stats/mainnethub-protocol.web.appScan history for this domain/api/v1/domain/history/mainnethub-protocol.web.app?limit=15
This website contacted 10 IPs in 1 country across 7 domains to perform 37 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mainnethub-protocol.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake 'WalletLink' dApp portal on a free .web.app subdomain that asks users to enter wallet private keys and links to a drainer-flagged domain — crypto wallet phishing/drainer, do not connect a wallet.

Risk Factors (5)
Brand impersonation of WalletLink (a known wallet-connection product) on a .web.app subdomain
Explicit solicitation of wallet private keys / recovery phrases
Outbound link to ddex.io flagged as a wallet drainer (phishing)
Wallet-drainer interaction lures (airdrop, claim, validation, migration, promo code, recovery)
Unknown-creation-date shared hosting tenant presenting itself as a financial/wallet service
Domain age information unavailable

Details

Page Title

WalletLink

Scan Type

public

Domain Name Analysis

The domain 'mainnethub-protocol.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'mainnethub-protocol'. The core label 'web' covers 3 characters containing one vowel alongside two consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

pam (BTC) $20,405 (2.0495) ~ — @ Ethereum (ETH) $1,91227(1.54%) ~ ) EOS (EOS) $0.722206 (2.79%) © —X XRP(KRP) $0477041 (2.20%) ~ EY Litecoin (LTC) $10.79¢-4.20%) ~ Powered by CoinGecko € Bitcoin q j...

Page Load Overview

75.10s
Total Load Time
259 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,088 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain62% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
62%
technology software
61%
finance banking
42%
gambling betting
42%
documentation technical
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3104.18.5.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.199.109.133Fastly · CDNUnited States
AS54113Fastly, Inc.
3192.178.183.101Google · CDNUnited States
AS15169Google LLC
3200.97.244.201United States
AS58658DXTL
3162.159.152.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.36.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.4.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.13.113Google · CDNUnited States
AS15169Google LLC
3162.159.153.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3710--

Detected Technologies6

Nuxt.js
50%
Node.js
50%
HTTP/3
40%
HSTS
40%
Firebase
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB83091B19F3015A0C53D1E46B7A7A44BBA1E207CC0ADC8ABADE1251CF86EB56DD335C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ybYZiPLM0eEHNGqZbuoQ0E0IDBGkjic1oWefV:ycio0BHcZDBGWiYoJfV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:86229:oRMjaUVR8Qh5hTcZICAgASRAGxmUPBW4FCYlAANJjFKGgGsADpoBCxYCIZdjEyoHGHAAFDwAJkcnZtKLqoIFslgucEBYQAJY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181818181bdbdbd
Perceptual Hash:af3c96903495d5c5
Difference Hash:1d45434369696969
Wavelet Hash:85818181b5bdbdbd
Color Hash:130000001c0

Other Hashes

Crop Resistant:1d45434369696969,dadadbdad2d2dbda,94c1c483c4c4d4d4

Scan History

Scan history not available

Unable to load historical scan data