Security Scan Report: rabbywallet-support.daftpage.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is daftpage.com and was registered 5 years ago.

Submitted URL: https://rabbywallet-support.daftpage.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Paused placeholder on a rabbywallet-support.daftpage.com subdomain impersonating Rabby Wallet support, with a single-source phishing report on the domain. No live form yet, but the deceptive hostname and threat-intel hit warrant high risk.

Risk Factors (5)
Deceptive hostname combining a crypto wallet brand name with 'support' on a third-party builder domain
Single-source phishing threat-intel match on the primary domain
Unranked subdomain with no verifiable legitimate presence
Placeholder 'deployment paused' page consistent with a temporarily disabled phishing deployment rather than a real service
Brand-support naming pattern ('-support') is a classic crypto-wallet social-engineering lure
Domain age information unavailable

Details

Page Title

Deployment Paused

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'rabbywallet-support.daftpage.com' is registered with subdomain 'rabbywallet-support'. Its registrable label 'daftpage' stretches across 8 characters split between 3 vowels and 5 consonants. Segmentation suggests 2 words: daft, page. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rabbywallet-support.daftpage.com/

Page Load Overview

0.18s
Total Load Time
2 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:94 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service67% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
67%
cryptocurrency blockchain
61%
news media journalism
60%
healthcare medical
57%
real estate property
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.198.79.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
22--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13531967745B1602DF33B88FE34E673682204901BC0920E99B618B7B4E2D7CA68023344

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:n01AUJXgZH+6n9zS3rJGm9q8hDH48OFFxnrFA+Dclgz9Dln38yRL48Ap7487uta:nGoZ9S3dGNGDY7nnrm+AgJJ8E0X7Z60

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1638:oACAAkAAAAEAACWAAIAADAABAACAAAcABAAAQAAAAAAAAAAAAAAAAQCAAARAEACAAACAQAAACEADAAQAAAUAAAACAAgAMQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:e699cc9966998999
Difference Hash:0000000c0c00000c
Wavelet Hash:30303c24e4fcf0e0
Color Hash:#862d34

Other Hashes

Crop Resistant:0000000c0c00000c

Scan History

Scan history not available

Unable to load historical scan data