Security Scan Report: hydrogen-raindrop.netlify.app

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Unranked netlify subdomain posing as a Typeform 'form moved' page; it loads a third-party resource flagged as a wallet drainer (single-source, unverified) and redirects users onward. No forms on the page itself. Treat as high-risk.

Risk Factors (3)
Content-malware-typed indicator of compromise (wallet drainer / phishing) on an embedded third-party resource (airtoken.typeform.com)
Deceptive hostname/brand mismatch: Typeform-branded content served from a netlify.app subdomain
Unknown-age, unranked shared-hosting subdomain used as a redirect/lure page
Domain age information unavailable

Details

Page Title

New typeform

Scan Type

public

Domain Name Analysis

The domain name 'hydrogen-raindrop.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'hydrogen-raindrop'. The registrable portion 'netlify' spans 7 characters split between 2 vowels and 5 consonants. It segments into 3 words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hydrogen-raindrop.netlify.app/

Page Load Overview

2.44s
Total Load Time
73 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:12 chars
Detector Agreement:0%

Website Classification

Primary Category

real estate property42% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
42%
adult content
40%
entertainment media
40%
gambling betting
38%
documentation technical
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
118.66.147.12Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1100.48.35.153Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
118.214.180.141Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
55--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A3116757058A901C423453D6FEE0D208A24B658DD7518DC97DFA11B4634C9FB54E7F4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kuhKTGh1WInowaY5C/rMOupO6nAt9CX42tI6p7LnTVgqa:5cTGhwCpaeC/nupOUAW9zsD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:901:IAIAAAEgAAAAEAEAAAAAAIiAAEAAAAAAAAAAAACAAAAQAAAAAAAAAAAAACAIMCAAAAAAIAAABEAAAAACQAAAACgCAAAAAAAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7ffffff
Perceptual Hash:b319cc663399cc66
Difference Hash:00000c0c0c000000
Wavelet Hash:0f0f2727070f0f0f
Color Hash:#44931f

Other Hashes

Crop Resistant:00000c0c0c000000

Scan History

Scan history not available

Unable to load historical scan data