Security Scan Report: profound-melba-9e8767.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 3 countries across 15 domains to perform 182 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://profound-melba-9e8767.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake Hyperliquid trading interface on a netlify.app subdomain with EtherHiding loader, blockchain RPC activity and a threat-intel wallet-drainer match. Do not connect a wallet.

Risk Factors (5)
Brand impersonation of Hyperliquid on an unranked free-hosting subdomain
Wallet-drainer threat-intel match on the primary domain
EtherHiding loader — next-stage address retrieved from a blockchain contract
Critical IDS malware alert and smart-chain/Ethereum RPC activity
Third-party .xyz resource flagged as ClearFake
Domain age information unavailable

Details

Page Title

53,700 | HYPE | Hyperliquid

Scan Type

public

Domain Name Analysis

You're looking at domain 'profound-melba-9e8767.netlify.app' on the application-focused generic top-level domain (.app), featuring subdomain 'profound-melba-9e8767'. Its registrable label 'netlify' stretches across 7 characters with two vowels and five consonants. Word splitting yields 3 words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://profound-melba-9e8767.netlify.app/

Page Load Overview

14.20s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,624 chars
Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain54% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
54%
finance banking
34%
documentation technical
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
10192.178.183.95Google · CDNUnited States
AS15169Google LLC
10143.204.181.94Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
10142.251.20.94Google · CDNUnited States
AS15169Google LLC
1034.251.166.204Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
1018.64.211.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
10143.204.181.60Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
18217--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1561484708250365D8217B3C8F431F76F333272AAE7C71ADCA7F4A291AA9DDE049494D9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:LVLo6nLtZ58+YtY3Q/2dO92bgRgTDtsPFp5H8kTPiGFlWJwoImDf+n1un:ZfLreCHzImDf+nS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:197487:DCukFSBAQrkAAKIMTYwpc4HSgHCATUBeiwBM0YCAlg1DBCqvgzJmmkfwiAcgLYaIQgAIQhKAFhBWCavQkIAyAIBUGIs4EaQQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e38724d71be90001
Perceptual Hash:afb66ea9a842432b
Difference Hash:430ecc2e734b1602
Wavelet Hash:f38766d40fff0003
Color Hash:#2dd24e

Other Hashes

Crop Resistant:430ecc2e734b1602

Scan History

Scan history not available

Unable to load historical scan data