sso-robinhood--com-autthh[.]webflow[.]io

The domain sso-robinhood--com-autthh.webflow.io is flagged as a brand impersonation threat, specifically targeting the financial services platform Robinhood. The domain does not appear to be associated with a crypto drainer kit.

Infrastructure analysis reveals that the domain has a VirusTotal score of 14/95, indicating a moderate level of detection by security vendors. The domain is registered through MarkMonitor, Inc., and resolves to the IP address 104.18.36.248. It was created on May 08, 2013, and appears on 2 security blocklists. The site's SSL certificate is issued by Google Trust Services under the WE1 certificate authority. The domain's status is currently offline, which may suggest it has been taken down or is no longer actively being used for malicious purposes.

Despite the domain being offline, it remains important to exercise caution as the threat could re-emerge. Response actions should include monitoring for any further activity and ensuring that users are educated on recognizing and avoiding brand impersonation scams. The elevated risk level indicates that the domain has the potential to cause significant harm if it becomes active again.