ScanMalware.com

Security Scan Report: robinhood-auth-io-cdn.pages.dev

Redirected to:
https://robinhood-auth-io-cdn.pages.dev/
Site favicon
Submitted: Sep 23, 2026, 2:48:52 PMCompleted: Sep 23, 2026, 2:49:27 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cf92a890-19ac-4792-ae62-801f723bff46Domain and IP registration (RDAP)/api/v1/rdap/cf92a890-19ac-4792-ae62-801f723bff46Certificate Transparency/api/v1/ct/robinhood-auth-io-cdn.pages.devHow often this domain was scanned/api/v1/domain/stats/robinhood-auth-io-cdn.pages.devScan history for this domain/api/v1/domain/history/robinhood-auth-io-cdn.pages.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is robinhood-auth-io-cdn.pages.dev and was registered 6 years ago.

Submitted URL: http://robinhood-auth-io-cdn.pages.dev/

Effective URL:

https://robinhood-auth-io-cdn.pages.dev/
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Keyword-stuffed 'Coinsmart Login' guide on a Robinhood-named pages.dev subdomain. No forms, no Indicators of Compromise, no malware — a brand-jacking SEO page rather than an active phishing kit.

Risk Factors (3)
Hostname references a different brand (Robinhood) than the page's subject (Coinsmart)
Brand-login keyword stuffing with trademark symbols and 'login' framing on a non-official, unranked domain
Free instant-hosting subdomain whose actual page age cannot be verified
Safety Factors (6)
No credential, password, or payment form of any kind
No threat-intelligence Indicators of Compromise matches
No JavaScript malware (YARA) or behavioral exfiltration signals
No outbound/external domains and no cross-origin form submissions
Content merely instructs users to visit the official Coinsmart site rather than collecting data itself
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Coinsmart Login ® ™ © Animated Guide

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'robinhood-auth-io-cdn.pages.dev' is registered, featuring subdomain 'robinhood-auth-io-cdn'. Its registrable label 'pages' stretches across 5 characters with two vowels and three consonants. Segmentation suggests 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://robinhood-auth-io-cdn.pages.dev/

Page Load Overview

0.42s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,345 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning97% confidence
Type: static
Method: ml+structural

All Detected Categories

education learning
97%
cryptocurrency blockchain
96%
technology software
89%
adult content
75%
government public service
70%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D971463BCB09600987C703757C35028C5E7F147866655BBF2AFFD008A6AB9654F322E6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Tm7mjbZGp4jaqIlocZyAtNb3ir1LL98bSVbHW:njAijXcZZtdipxNVTW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3657:CoAAAAAoAEQAEDJQKQAAAMAkBAMApAEAIQIAIiBRBhogQAJAAACBKEEAMoAgAiBogAEIAAACQAQIEAAAAACoAqBk4AIAAACI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f003f7f3f3f
Perceptual Hash:817d83e07a3c878f
Difference Hash:c2c2f0d8c0c0c0c0
Wavelet Hash:7f031f00003f3f3f
Color Hash:#756ce0

Other Hashes

Crop Resistant:c2c2f0d8c0c0c0c0

Scan History

Scan history not available

Unable to load historical scan data