ScanMalware.com

Security Scan Report: ssamsung1.xyz

Redirected to:
https://ssamsung1.xyz/login/index
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/601b482a-1fbb-4f7d-9e7a-20d2659ada67Domain and IP registration (RDAP)/api/v1/rdap/601b482a-1fbb-4f7d-9e7a-20d2659ada67How often this domain was scanned/api/v1/domain/stats/ssamsung1.xyzScan history for this domain/api/v1/domain/history/ssamsung1.xyz?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is ssamsung1.xyz and was registered 2 days ago.

Submitted URL: http://ssamsung1.xyz

Effective URL:
https://ssamsung1.xyz/login/index
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 99%

10
Risk Score

Fake Samsung login on a 1-day-old domain, harvesting credentials and carrying a critical crypto-clipper malware kit. Do not enter credentials; report as scam.

Risk Factors (6)
Brand impersonation of Samsung on a non-official domain
Credential-harvesting login form under Samsung branding
Newly registered domain (1 day old)
Known malicious crypto-clipper kit identified by analyst-vetted roster
Critical hunting-rule detection for crypto clipboard hijacking
Typo-squatting-style domain name ssamsung1.xyz
Domain age information unavailable

Details

Page Title

Samsung

Scan Type

public

Domain Name Analysis

Within the open generic top-level domain (.xyz), 'ssamsung1.xyz' is registered while skipping any subdomain. The core label 'ssamsung1' covers 9 characters containing two vowels alongside six consonants, notching 1 digit. Segmentation suggests 3 words: s, samsung, 1. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://ssamsung1.xyz

Page Load Overview

2.01s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:322 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content95% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
95%
technology software
66%
education learning
63%
government public service
37%
news media journalism
33%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.54.179Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.168.201Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Detected Technologies6

PasswordField
100%
JQueryv1.11.3
100%
HTTP/3
40%
HSTS
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12022D800A4F76C26A123838E769B292C297D9073850E9401BF5C237D9FB6CA6752B77D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:VpuOkhrSE4I9EKjoeMiSHEWZlEpZBKSOLpAPEGkBCr+:VkQBkZB7Gn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10603:FAsAcFBCJIMAKPSRwe5QmC3gZUETQIBwA2BrQBKXiBYCAAgwcESAU8OCJgpku6IIpPBmSBwdBCwACOCAlEgOAVDoL0EcITIb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7e7e7
Perceptual Hash:e6cc6632333399cc
Difference Hash:4d4d4d4d4d4d4d4d
Wavelet Hash:c0c0e0e0e3e3e3e3
Color Hash:N/A

Other Hashes

Crop Resistant:0202020202020202,8080808080808080,0f81e179c0c04d55

Scan History

Scan history not available

Unable to load historical scan data