ScanMalware.com

Security Scan Report: sso--help-robinhood-cdn.pages.dev

Redirected to:
https://sso--help-robinhood-cdn.pages.dev/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f2d78ecc-cc09-4bfb-92ad-2f38ee198b9cDomain and IP registration (RDAP)/api/v1/rdap/f2d78ecc-cc09-4bfb-92ad-2f38ee198b9cHow often this domain was scanned/api/v1/domain/stats/sso--help-robinhood-cdn.pages.devScan history for this domain/api/v1/domain/history/sso--help-robinhood-cdn.pages.dev?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://sso--help-robinhood-cdn.pages.dev/

Effective URL:
https://sso--help-robinhood-cdn.pages.dev/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Lookalike Robinhood SSO/help hostname on a Cloudflare Pages subdomain. No forms or credential capture detected and links go to official Robinhood, but the deceptive branding warrants caution.

Risk Factors (3)
Deceptive hostname imitating a financial brand's SSO/help subdomain on a shared Cloudflare Pages tenant
Robinhood brand used on a domain that is not Robinhood's official property
Domain unranked in Cisco Umbrella with unknown page creation date
Safety Factors (5)
No forms, password fields, or payment fields detected — no on-page credential harvesting
Page links only to the official https://robinhood.com/login
Content explicitly advises users to verify the official domain and beware of phishing links
No Indicators of Compromise, hunting-rule matches, Safe Browsing hits, or malware IDS alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'sso--help-robinhood-cdn.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'sso--help-robinhood-cdn'. Its registrable label 'pages' stretches across 5 characters split between 2 vowels and three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Overview Robinhood makes it simple to access your investment accounts from web and mobile. The Login flow is your gateway to stocks, ETFs, options, erypto, and account services. This presentation cov...

Page Load Overview

0.76s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:3,006 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%
documentation technical
63%
finance banking
57%
cryptocurrency blockchain
47%
gambling betting
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
31--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6C1781B92ED2032034345517D225329AE27404BA95ABD2F796D034CAFB9FA6C9632FD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:8sGecYs2111fVnHsOQ1bA535Z00pxSYpOHMJ9Th:8sjs2P1fVrabq35SexSs7h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5706:igUTWDQlsoBQRgDBBYQdABEBQEERLBDBLBRAogBiIABEgB0FEACAIIFABFCkgEIMI4CUIKQApgALB4DoCmQJoKRAwgsII6Ei

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e3f3f3f073f3f07
Perceptual Hash:85d3f070788f7878
Difference Hash:a0e0e4e0ccc6f0b6
Wavelet Hash:1c3f723f02293f07
Color Hash:N/A

Other Hashes

Crop Resistant:a0e0e4e0ccc6f0b6

Scan History

Scan history not available

Unable to load historical scan data