Security Scan: Robinhood Chain: Claim Airdrop Rewards

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5d5f0b0b-8ea8-4654-9bdb-51f8da5a09ba Domain and IP registration (RDAP)/api/v1/rdap/5d5f0b0b-8ea8-4654-9bdb-51f8da5a09baHow often this domain was scanned/api/v1/domain/stats/claim-robin-hood-drop.vercel.app Scan history for this domain/api/v1/domain/history/claim-robin-hood-drop.vercel.app?limit=15

This website contacted 12 IPs in 1 country across 8 domains to perform 40 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.claim-robin-hood-drop.vercel.app/

Effective URL:

https://claim-robin-hood-drop.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake 'Robinhood Chain' airdrop page on a vercel.app subdomain — impersonates Robinhood branding with wallet-connect/RPC infrastructure, flagged as a crypto wallet drainer and matched by a CRITICAL EtherHiding malware alert. Do not connect a wallet.

Risk Factors (5)

Impersonation of Robinhood (favicon, OG site name, branding) on an unrelated vercel.app subdomain

'Claim Airdrop Rewards' wallet-drainer lure with no legitimate brand domain

Content-threat threat-intel match (wallet drainer / phishing) on the primary domain

CRITICAL Suricata malware alert (EtherHiding Exfil) and abused-cloud-hosting traffic

Obfuscated inline JavaScript (eval, encode/decode) with crypto/RPC network sinks

Domain age information unavailable

Details

Page Title

Robinhood Chain: Claim Airdrop Rewards

Scan Type

public

Favicon Hash

MMH3: 75680253

MD5: c8c313f24a03abc7593ad9d1129b2630

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.claim-robin-hood-drop.vercel.app' is registered; it also runs on subdomain 'www.claim-robin-hood-drop'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. Splitting it apart reveals two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

figRobinhood [What We Offer JM Support] Cookie Settings We use third-party tracking technolagies ta improve your experience, analyse app performance, and show customised ads. By accepting, you are a...

Page Load Overview

6.60s

Total Load Time

5.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:14,368 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

42%

government public service

36%

cryptocurrency blockchain

31%

documentation technical

31%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	13.33.187.2Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
3	18.66.122.79Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	18.66.122.27Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	18.66.102.36Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	18.66.102.52Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	18.66.102.88Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	162.159.135.232Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
40	12	-	-