Security Scan Report: hydrogen-raindrop.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://hydrogen-raindrop.netlify.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Free netlify.app page imitating a Typeform 'moved' notice and redirecting to an unrelated typeform; its domain is flagged for phishing and a linked resource for wallet draining. Avoid.

Risk Factors (5)
Indicators of Compromise: primary domain flagged as phishing by threat intelligence
Indicators of Compromise: linked airtoken.typeform.com flagged as a wallet drainer
Brand impersonation of Typeform on a non-Typeform, free-hosting subdomain
Thin redirect-only page whose sole purpose is to move visitors to another host
Unknown-age, unranked shared-hosting tenant with no verifiable identity
Domain age information unavailable

Details

Page Title

New typeform

Scan Type

public

Domain Name Analysis

The domain name 'hydrogen-raindrop.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'hydrogen-raindrop'. Count 7 characters in 'netlify' split between 2 vowels and five consonants. It segments into three words: net, li, fy. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

> This typeform has moved to a new address Hit the button and we'll redirect you to ahsgames.typeform.com

Page Load Overview

2.62s
Total Load Time
73 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:12 chars
Detector Agreement:0%

Website Classification

Primary Category

real estate property42% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
42%
adult content
40%
entertainment media
40%
gambling betting
38%
documentation technical
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
118.66.147.12Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
135.171.246.221Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1184.194.210.162Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
55--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A3116757058A901C423453D6FEE0D208A24B658DD7518DC97DFA11B4634C9FB54E7F4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kuhKTGh1WInowaY5C/rMOupO6nAt9CX42tI6p7LnTVgqa:5cTGhwCpaeC/nupOUAW9zsD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:901:IAIAAAEgAAAAEAEAAAAAAIiAAEAAAAAAAAAAAACAAAAQAAAAAAAAAAAAACAIMCAAAAAAIAAABEAAAAACQAAAACgCAAAAAAAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7ffffff
Perceptual Hash:b319cc663399cc66
Difference Hash:00000c0c0c000000
Wavelet Hash:0f0f2727070f0f0f
Color Hash:07001000180

Other Hashes

Crop Resistant:00000c0c0c000000

Scan History

Scan history not available

Unable to load historical scan data