Security Scan Report: robinhoodsurplusrecovery.com

Site favicon
Submitted: Sep 23, 2026, 2:47:32 PMCompleted: Sep 23, 2026, 2:48:08 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established 4-year-old self-branded surplus-recovery info site. No forms collect credentials or payment, no impersonation, and no Indicators of Compromise or malware signals — low risk, but verify fee terms independently.

Risk Factors (2)
Domain is unranked in Cisco Umbrella (no reputation data) — a weak prior only, not evidence of wrongdoing
Surplus/overage recovery services commonly charge contingency or upfront fees; users should verify licensing and fee terms before signing
Safety Factors (5)
Domain registered 2022-08-27, operating over 4 years
Self-branded site — no impersonation of another organisation's brand
No password, payment, or disguised credential fields present
No threat-intelligence, YARA, IDS, or JavaScript exfiltration signals
Clear informational content explaining the surplus-funds process with About/Contact/FAQ pages
Domain age information unavailable

Details

Page Title

Robinhood Surplus Recovery

Scan Type

public

Domain Name Analysis

You're looking at domain 'robinhoodsurplusrecovery.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'robinhoodsurplusrecovery' is 24 characters long containing nine vowels alongside 15 consonants. It segments into four words: robin, hood, surplus, recovery. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://robinhoodsurplusrecovery.com

Page Load Overview

2.28s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,917 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service38% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
38%
corporate business
34%
adult content
28%
education learning
28%
finance banking
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5160.153.0.173Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
423.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
423.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
4192.178.183.138Google · CDNUnited States
AS15169Google LLC
4142.251.156.119Google · CDNUnited States
AS15169Google LLC
4142.251.14.120Google · CDNUnited States
AS15169Google LLC
4172.217.112.4Google · CDNUnited States
AS15169Google LLC
4172.217.118.4Google · CDNUnited States
AS15169Google LLC
4172.217.116.4Google · CDNUnited States
AS15169Google LLC
4172.217.119.4Google · CDNUnited States
AS15169Google LLC
8922--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EEA37761B9872865319F03EF9047230C50DAEFF5E662A7E5F4F291206378C9537E326A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:iLZdypaRFnqF6VAnqFz0RIWXLEFMX/wBifcHF+zPn9r9nM:i7ypSnqF6VAnqFGLER+TnlpM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:102284:IKREoNeqKoACCCFmqGrqMA9lCkhKIAKhxPgkAgQocCEgvDDqUKBRuAIQiIABESQ0GAko04kyt4BMqQgMVVFAgNBGzNDU2AGO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e0e0f87c7e3c3961
Perceptual Hash:ca79631eb58b7224
Difference Hash:491391f0f4e1e1cf
Wavelet Hash:e0e0f87c7c3c3961
Color Hash:#6ce0e0

Scan History

Scan history not available

Unable to load historical scan data