Security Scan Report: rabbyextension.onhercules.app

Submitted: Completed: publiccompleted
This website contacted 25 IPs in 2 countries across 18 domains to perform 22 HTTP transactions. The main domain is onhercules.app and was registered 1 year 3 months ago.

Submitted URL: https://rabbyextension.onhercules.app/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Taken-down Cloudflare 451 interstitial on a hostname that impersonates the Rabby crypto wallet brand, with a single-source phishing report. No live forms, but the deceptive hostname warrants avoidance.

Risk Factors (4)
Hostname impersonates the Rabby crypto wallet brand on an unrelated hosting platform subdomain
Single-source (unverified) phishing threat-intelligence match on the primary domain
Page is a legal-takedown (Error 451) interstitial rather than a genuine business site
Deceptive naming targeting crypto-wallet users despite no visible on-page content
Domain age information unavailable

Details

Page Title

Unavailable For Legal Reasons

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'rabbyextension.onhercules.app' is registered and includes subdomain 'rabbyextension'. The registrable portion 'onhercules' spans 10 characters containing four vowels alongside six consonants. Segmentation suggests two words: on, hercules. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rabbyextension.onhercules.app/

Page Load Overview

0.18s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:380 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software36% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
36%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22104.18.19.172Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.31.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0146.75.121.194Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
023.50.131.156Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0108.138.7.58Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0104.18.27.232Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
034.111.241.208Google · CDNKansas City, Missouri, United States
AS396982Google LLC
0172.66.0.102Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.29.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
035.190.26.57Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2225--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12D026573F1F559290043C397B9BDBF1E3926A01B9BB109917E5E42715F8EE42B942388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lma/Daazl4Jz+zwSG96nM38enBYgDxsIsss2sxcBA2snRC7aR:Ma/um4RL6nM38eFY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8209:iU4kO5RgARgASkCgMwTCkYEtwwEDTYgAgA4mAA9zjAcCChlZLQUDjsCgCzICakyLisEAeaGABDLZGFco4QSgAlyQQGdAgCED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:87cfcfe7ffffffff
Perceptual Hash:b838381c6767ce9c
Difference Hash:3c3c380e14000000
Wavelet Hash:838f87c3f0f0f0f0
Color Hash:#8c40bf

Other Hashes

Crop Resistant:3c3c380e14000000

Scan History

Scan history not available

Unable to load historical scan data