Security Scan Report: vip-ssu.com

Redirected to:
https://vip-ssu.com/#/pages/index/home
Site favicon
Submitted: Aug 17, 2026, 12:30:10 PMCompleted: Aug 17, 2026, 12:46:30 PMpubliccompleted

Summary

This website contacted 3 IPs in 3 countries across 10 domains to perform 2 HTTP transactions. The main domain is vip-ssu.com and was registered 1 month ago.

Submitted URL: https://vip-ssu.com/

Effective URL: https://vip-ssu.com/#/pages/index/homeRedirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

The site hosts a credential‑phishing login form, uses a known phishing kit, and operates on a brand‑impersonating, very‑new unranked domain.

Risk Factors
Very new domain (high phishing propensity)
Credential collection form on non‑official domain
Brand impersonation (meta tags claim a different brand)
Malicious kit fingerprint matches known phishing infrastructure
Threat‑intel IP reputation
Domain age information unavailable

Details

Page Title

TYSSU

Scan Type

public

Language

🇵🇹

Portuguese

(80% confidence)

Category

corporate

(50%)

Domain Information

Domain 'vip-ssu.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'vip-ssu' is 7 characters long with 2 vowels and 4 consonants, plus one hyphen. It segments into three words: vip, s, su. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vip-ssu.com/

Page Load Overview

22.26s
Total Load Time
108
HTTP Requests
10
Domains
14.2 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:pt
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:pt
Text Length:3,240 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
36104.18.5.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
36149.154.167.99Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
1083--

Page Statistics

108
Requests
10
Unique Domains
15.2 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168A4F736725B383B6437C95475D0DB2C9A26BB23C21516A4FE6A1FF91EC7BE10A32704

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:tYnJEixOYmS7fvhpoLp0nQ6YSrSVrJ36tvd6WXN17DXoMwSnzFudZgbrIFtsM6:tYnRhxqEbDwSYzFQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:455706:Gp1HAgGszDUH8KgIXMJuGkgihJgASAAAvgBPPGDFMgVoCAJIYTMChUm1MBKFwIiESIMCEUiYaPQckgIC2JFrDuCxEbAHXT4Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e3e3f7ffe7
Perceptual Hash:e6669b8c669930ce
Difference Hash:040c0c0c04163a4c
Wavelet Hash:c0c0c0c0c0c0d8c0
Color Hash:#2d6786

Other Hashes

Crop Resistant:040c0c0c04163a4c

Scan History

Scan history not available

Unable to load historical scan data