Security Scan Report: multi-xchange.web.app

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 39 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://multi-xchange.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake 'WalletLink' wallet-connect page on a Firebase subdomain; a critical stealer pattern with a Telegram bot token plus a wallet-drainer threat-intel report. Never connect a wallet here.

Risk Factors (5)
Critical JavaScript stealer pattern with Telegram bot exfiltration channel
Threat-intel wallet drainer / phishing label on the primary domain
Impersonation of the WalletLink / WalletConnect wallet-connection brand on a non-official domain
Unverifiable trust claims (audited, insured, $1M+ trades, 'backed by the best') on an anonymous shared-hosting subdomain
'Connect Wallet' flow on a page whose only plausible purpose is obtaining wallet authorisations
Domain age information unavailable

Details

Page Title

WalletLink

Scan Type

public

Domain Name Analysis

You're looking at domain 'multi-xchange.web.app' on the application-focused generic top-level domain (.app) and includes subdomain 'multi-xchange'. The registrable portion 'web' spans 3 characters holding one vowel versus two consonants. Splitting it apart reveals 1 word: web. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://multi-xchange.web.app/

Page Load Overview

2.66s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,412 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
71%
cryptocurrency blockchain
42%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
9104.20.35.94Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.66.147.126Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.64.150.129Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
394--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12FF24B1D6E48116E2467C1F5F090AB9CA101F347CB23A5E9F6AD2651CFC6FF68F22608

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:DUcG9mWHkGLXeZvOEPuopqTyE5RRwCYF2K3s/kS+lLE/HcuQAriDd8Aoz+Sk:o9vcOEeyEGCYFxQcfU6ozjk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35209:Ah8BSICC4VAOFQFjUFgERFChIFEBpAkPGgkFeAKMaWgFQaVOSIYFCAD29wFSVyKJp4dKgkAANCUbABAIBOOh3GqCwqCxCAiA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81818181bdbd8181
Perceptual Hash:af743c96383c9634
Difference Hash:0d434b136961691b
Wavelet Hash:85a1a181fdbdbd81
Color Hash:#e06c92

Scan History

Scan history not available

Unable to load historical scan data