Security Scan: Robinhood Chain: Claim Airdrop Rewards

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bf0e5297-b37f-4ab5-b0ca-d6987a186bdd Domain and IP registration (RDAP)/api/v1/rdap/bf0e5297-b37f-4ab5-b0ca-d6987a186bddHow often this domain was scanned/api/v1/domain/stats/claim-robin-hood-drop.vercel.app Scan history for this domain/api/v1/domain/history/claim-robin-hood-drop.vercel.app?limit=15

This website contacted 13 IPs in 1 country across 7 domains to perform 40 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://claim-robin-hood-drop.vercel.app/

Effective URL:

https://claim-robin-hood-drop.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Confirmed crypto wallet-drainer phishing page impersonating Robinhood with a fake airdrop 'claim rewards' lure; primary domain flagged as wallet drainer and a CRITICAL EtherHiding malware IDS alert fired. Avoid.

Risk Factors (6)

Brand impersonation of Robinhood on an unrelated vercel.app subdomain

Threat-intel IoC: wallet drainer/phishing on the primary domain

CRITICAL IDS malware alert (EtherHiding Exfil M2)

Fake 'Claim Airdrop Rewards' / free-token lure

Blockchain RPC connection combined with brand impersonation — wallet-drainer pattern

Domain unranked, no legitimacy signals (legitimacy score 10/100)

Domain age information unavailable

Details

Page Title

Robinhood Chain: Claim Airdrop Rewards

Scan Type

public

Favicon Hash

MMH3: 75680253

MD5: c8c313f24a03abc7593ad9d1129b2630

Domain Name Analysis

Domain 'claim-robin-hood-drop.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'claim-robin-hood-drop'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and 4 consonants. Tokenizing the label suggests two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

figRobinhood [What We Offer JM Support] Cookie Settings We use third-party tracking technolagies ta improve your experience, analyse app performance, and show customised ads. By accepting, you are a...

Page Load Overview

8.05s

Total Load Time

5.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:14,368 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

42%

government public service

36%

cryptocurrency blockchain

31%

documentation technical

31%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	13.33.187.25Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
3	18.66.122.27Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	13.33.187.102Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
3	18.66.122.79Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	18.66.102.36Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	18.66.102.52Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	18.66.102.104Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
40	13	-	-