ScanMalware.com

Security Scan Report: login.167.172.190.104.sslip.io

Redirected to:
https://login.167.172.190.104.sslip.io/
Site favicon
Submitted: Jul 20, 2026, 8:39:25 AMCompleted: Jul 20, 2026, 8:40:46 AMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is login.167.172.190.104.sslip.io and was registered 11 years ago.

Submitted URL: https://login.167.172.190.104.sslip.io/ZQJwfvVd

Effective URL: https://login.167.172.190.104.sslip.io/Redirected

The Cisco Umbrella rank of the primary domain is #479,547 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 88%

3
Risk Score

Page harvests credentials while impersonating Contoso; treat as high‑risk phishing.

Risk Factors
Brand impersonation on unrelated domain
Credential collection form
Low Cisco Umbrella ranking for a well‑known brand
Safety Factors
No malicious JavaScript YARA matches
No network IDS alerts
No external links or redirects to suspicious sites
Top-ranked domain (Cisco Umbrella #479,547, 3992 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Sign in to your Contoso account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'login.167.172.190.104.sslip.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'login.167.172.190.104'. The registrable portion 'sslip' spans 5 characters containing 1 vowel alongside 4 consonants. It segments into two words: s, slip. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of login.167.172.190.104.sslip.io

Page Load Overview

1.38s
Total Load Time
4
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:140 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4167.172.190.104Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
41--

Page Statistics

4
Requests
1
Unique Domains
6.1 KB
Total Size

Detected Technologies1

PasswordField
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16B51B76156A04913C5E0D981E1F2B258311DFA6386C1A90CE7F560CC6EC99D67BF3B4A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:T6cCdNXNyw4zH0pEmCsACwAwYfCZ8ep9JHi5ibGrDcnah5T0YT4L:T6JDXN8Yy22/P9i54E1ML

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2905:sgCUACQAEAAgAAgEgIIAZAAEABEEAAAgAQASAABAAAlAAAFAqQAAAAA0gECWAkAACBQwAAAAMGQRKAEIAigAQQAQAAAAEMAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181810180000
Perceptual Hash:cc993366cc999966
Difference Hash:0008303224180000
Wavelet Hash:0f0f1b1b131b0f0f
Color Hash:#7a2d86

Other Hashes

Crop Resistant:0008303224180000

Scan History

Scan history not available

Unable to load historical scan data