ScanMalware.com

Security Scan Report: skiheavenly.com

Redirected to:
https://www.skiheavenly.com/
Site favicon
Submitted: Aug 13, 2026, 9:38:11 PMCompleted: Aug 13, 2026, 9:40:06 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 3 countries across 8 domains to perform 2 HTTP transactions. The main domain is skiheavenly.com and was registered NaN years ago.

Submitted URL: https://skiheavenly.com

Effective URL: https://www.skiheavenly.com/Redirected

The Cisco Umbrella rank of the primary domain is #386,494 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

Site impersonates the Heavenly ski resort and harvests credentials via a login form; treat as high‑risk phishing.

Risk Factors
Brand impersonation on low‑ranked domain
Credential collection form on non‑official domain
High JavaScript obfuscation score
Safety Factors
Top-ranked domain (Cisco Umbrella #386,494, 11201 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Tahoe Skiing & Snowboarding | Heavenly Ski Resort

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

travel tourism

(32%)

Domain Information

The domain name 'skiheavenly.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'skiheavenly' stretches across 11 characters with 4 vowels and seven consonants. Segmentation suggests 2 words: ski, heavenly. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://skiheavenly.com

Page Load Overview

8.01s
Total Load Time
152
HTTP Requests
23
Domains
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:15,459 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism32% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

travel tourism
32%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2613.32.99.91Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
21172.64.147.18Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2123.55.161.185Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
21192.178.183.94Google · CDNUnited States
AS15169Google LLC
21184.31.85.55Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2123.9.123.220Hyderabad, Telangana, India
AS16625Akamai Technologies, Inc.
213.174.46.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1527--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179A4B320B0E4147601AB86E5B3717B4BBAE2E203C9465480F6FD17A94FEBDD2F91716C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:vDoquSM7d/voKcx1I6DLV48Z+c33EJDrf:vDoquSM7d/voKcxzLV48ZXkDrf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:469972:0BAZS6gDgqQYzKH0l0wJEyuAEIGBJQDjGwCrAMaIEAgkjABgCIwUYKD1dMrk1MhQSJBlyGEIAKAQOjbURAZMsIjJ4Q0TMAZf

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000722303ffffff
Perceptual Hash:a545da3f2581d876
Difference Hash:c7c2c2e6661a4f4e
Wavelet Hash:0000720303ffffff
Color Hash:#bf406a

Other Hashes

Crop Resistant:c7c2c2e6661a4f4e,c487c6c2c2c2c6c2,e0e0e0e2e0707133

Scan History

Scan history not available

Unable to load historical scan data