Security Scan Report: rabby-web.onhercules.app

Submitted: Completed: publiccompleted
This website contacted 20 IPs in 2 countries across 20 domains to perform 24 HTTP transactions. The main domain is onhercules.app and was registered 1 year 3 months ago.

Submitted URL: https://rabby-web.onhercules.app/

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Offline (Cloudflare 451) subdomain 'rabby-web' on onhercules.app mimics the Rabby wallet brand and carries a single-source phishing report; treat as a taken-down phishing host and avoid it.

Risk Factors (4)
Deceptive hostname impersonating the Rabby wallet brand on a non-official domain
Primary-domain phishing report (single-source, unverified)
Third-party platform subdomain (onhercules.app) with no verifiable owner identity
Site currently blocked with a legal/abuse takedown error page
Domain age information unavailable

Details

Page Title

Unavailable For Legal Reasons

Scan Type

public

Domain Name Analysis

Domain 'rabby-web.onhercules.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'rabby-web'. The core label 'onhercules' covers 10 characters split between 4 vowels and six consonants. Segmentation suggests two words: on, hercules. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rabby-web.onhercules.app/

Page Load Overview

0.17s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:380 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
37%
documentation technical
28%
cryptocurrency blockchain
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.18.18.172Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.31.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.19.172Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
123.53.40.224Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
135.190.26.57Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1172.66.0.102Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.29.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.39.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
123.50.131.156Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2420--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ED027573F1F959290043C397B9BDBB1E3926A01B9BB109917E5D42725F8EF43B941388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lma/Daazl4JzNzcSG9BnM38enBYisCsHsEsHCxBIJ3LcS7nAPxqZ63:Ma/um4cLBnM38eexGgx3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8209:iU4se5SgAFEAQkRIEgDA0ZMlQwELDY0AgA4mCg9xDEICAAkYDS0hkMgAOzITQESZiMEwWIWEBDLZGNYoQQGiAlyYgCRAgKEn

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:87cfcfe7ffffffff
Perceptual Hash:b838381c6767ce9c
Difference Hash:3c3c380e14000000
Wavelet Hash:838f87c30f0f0f0f
Color Hash:#8479d2

Other Hashes

Crop Resistant:3c3c380e14000000

Scan History

Scan history not available

Unable to load historical scan data