Security Scan Report: checkout.robinhoodrpc.io

Redirected to:
https://checkout.robinhoodrpc.io/s/0e303625-abe1-4d10-95fe-8c2149b8d51...
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 27 HTTP transactions. The main domain is robinhoodrpc.io and was registered 2 months ago.

Submitted URL: http://checkout.robinhoodrpc.io/

Effective URL:
https://checkout.robinhoodrpc.io/s/0e303625-abe1-4d10-95fe-8c2149b8d51...
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Unofficial robinhoodrpc.io checkout uses the Robinhood brand to sell 'Robinhood Chain RPC' plans, takes name/email and irreversible Solana payment under a countdown. Treat as brand impersonation; do not pay.

Risk Factors (4)
Unofficial domain using the Robinhood brand name for a paid 'Robinhood Chain RPC' checkout
Domain 74 days old and unranked in Cisco Umbrella
Solicits name and work email plus direct on-chain Solana payment with no refund path
Countdown-driven discount pressure to complete payment quickly
Domain age information unavailable

Details

Page Title

Robinhood RPC — checkout

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'checkout.robinhoodrpc.io' is registered and includes subdomain 'checkout'. Its registrable label 'robinhoodrpc' stretches across 12 characters holding four vowels versus 8 consonants. Tokenizing the label suggests three words: robin, hood, rpc. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

+ ACTIVATESO: 50% off your first plan payment, applied automatically Ends in 10:24:06 Robinhood RPC Checkout © Start over ) Save foriater 6 ain Order summary 9 r 2) Plan contact Add our name & email...

Page Load Overview

11.86s
Total Load Time
600 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:848 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking68% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
68%
documentation technical
66%
cryptocurrency blockchain
65%
technology software
38%
e-commerce shopping
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9104.21.55.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9146.0.253.57Frankfurt am Main, Hesse, Germany
AS29066velia.net Internetdienste GmbH
9172.67.145.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
273--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D7C2E7267800D92BCA271D5D627E9F3950C9D93BCE11A868D6ECC62917C3DF49FE28C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:54uuZFTod7CHVjiirhfUQUKK0t+wbVt5GgVeHX1V:5QtHLtX1KDwbVbGbX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27612:YAADUpA0QMHAoUqzCOr5KMQxEDGCCAAeCgIwNwAwkdJwAgMRcIJYLCUDCjB8SFIw0kABCfuOKMgiFyQgGQCDmUKVcBXhS1GK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8bc303e3e30303ff
Perceptual Hash:e1fd1e1de01e1ec0
Difference Hash:320e868e8e368604
Wavelet Hash:8b03e3e3e30303fe
Color Hash:38000038000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data