Security Scan Report: sso--help-robinhood-cdn.pages.dev

Redirected to:
https://sso--help-robinhood-cdn.pages.dev/
Site favicon
Submitted: Sep 23, 2026, 2:52:45 AMCompleted: Sep 23, 2026, 2:53:20 AMpubliccompleted

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is sso--help-robinhood-cdn.pages.dev and was registered 6 years ago.

Submitted URL: http://sso--help-robinhood-cdn.pages.dev/

Effective URL:

https://sso--help-robinhood-cdn.pages.dev/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Lookalike Robinhood SSO/help hostname on a Cloudflare Pages subdomain. No forms or credential capture detected and links go to official Robinhood, but the deceptive branding warrants caution.

Risk Factors (3)
Deceptive hostname imitating a financial brand's SSO/help subdomain on a shared Cloudflare Pages tenant
Robinhood brand used on a domain that is not Robinhood's official property
Domain unranked in Cisco Umbrella with unknown page creation date
Safety Factors (5)
No forms, password fields, or payment fields detected — no on-page credential harvesting
Page links only to the official https://robinhood.com/login
Content explicitly advises users to verify the official domain and beware of phishing links
No Indicators of Compromise, YARA matches, Safe Browsing hits, or malware IDS alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'sso--help-robinhood-cdn.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'sso--help-robinhood-cdn'. Its registrable label 'pages' stretches across 5 characters split between 2 vowels and three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://sso--help-robinhood-cdn.pages.dev/

Page Load Overview

0.76s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:3,006 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%
documentation technical
63%
finance banking
57%
cryptocurrency blockchain
47%
gambling betting
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
31--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6C1781B92ED2032034345517D225329AE27404BA95ABD2F796D034CAFB9FA6C9632FD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:8sGecYs2111fVnHsOQ1bA535Z00pxSYpOHMJ9Th:8sjs2P1fVrabq35SexSs7h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5706:igUTWDQlsoBQRgDBBYQdABEBQEERLBDBLBRAogBiIABEgB0FEACAIIFABFCkgEIMI4CUIKQApgALB4DoCmQJoKRAwgsII6Ei

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e3f3f3f073f3f07
Perceptual Hash:85d3f070788f7878
Difference Hash:a0e0e4e0ccc6f0b6
Wavelet Hash:1c3f723f02293f07
Color Hash:#931f6f

Other Hashes

Crop Resistant:a0e0e4e0ccc6f0b6

Scan History

Scan history not available

Unable to load historical scan data