Security Scan Report: samsung.beer

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is samsung.beer and was registered 1 month ago.

Submitted URL: https://samsung.beer/login/index

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

52-day-old, unranked samsung.beer hosts a 'CHIP INVEST' login capturing phone numbers and passwords — deceptive domain with a credential form; do not sign in or enter credentials.

Risk Factors (4)
Well-known trademark (Samsung) used in a domain that has nothing to do with Samsung or the page's stated service
Credential-collecting login form (phone + password) on a 52-day-old domain
Complete absence of domain reputation or history for a site claiming to be an investment platform
Mismatch between displayed brand 'CHIP INVEST' and hostname 'samsung.beer'
Safety Factors (4)
Form posts same-origin to the scanned domain (no cross-origin credential submission detected)
No JavaScript credential exfiltration, obfuscation, or malware patterns observed
No indicators of compromise, Safe Browsing, IDS or kit-roster matches
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

CHIP INVEST · Iniciar sesión

Scan Type

public

Domain Name Analysis

Domain 'samsung.beer' uses the .beer top-level domain with no subdomain. The registrable portion 'samsung' spans 7 characters with two vowels and five consonants. Splitting it apart reveals 1 word: samsung. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://samsung.beer/login/index

Page Load Overview

2.05s
Total Load Time
200 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:186 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain71% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
71%
finance banking
63%
technology software
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.142.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.27.136Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
82--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F7177428CFD5E3762138AC8F5C1F919A867E013D60924E8B3BC5BB95FF5EA1640B10D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:scN601SLhNOZ3r6ajilMMAOeX1p1BTTSvbuGpyOTSGvw2pdvcTDeiHkkvPwQldba:yOZO+tR7TSvbuaS6SDlHkiP9nba

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3818:UAGIAimJYIHIAVBCQQACuAAABAAIAhAQGBjJCCAQQEIAUAEiCQAgQQAGQAIAIACAIAIgMAFYAqECAAVSAsECEQsIgQAAQFAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7fff7e3e7ffe7e7
Perceptual Hash:e6cc999966668c33
Difference Hash:0c18044d4d324d4c
Wavelet Hash:c3c3c3c3031b0303
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data