ScanMalware.com

Security Scan Report: snip.ly

Redirected to: https://1762960362428-aboard-shoes.surge.sh/index.html?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply

Submitted: Nov 17, 2025, 6:49:04 AMCompleted: Nov 17, 2025, 6:49:39 AMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 3 countries across 5 domains to perform 23 HTTP transactions. The main domain is 1762960362428-aboard-shoes.surge.sh.

Submitted URL: https://snip.ly/x4psb8

Effective URL: https://1762960362428-aboard-shoes.surge.sh/index.html?utm_source=sniply&utm_campaign=sniply&utm_medium=sniplyRedirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Phishing login page likely harvesting credentials; treat as high risk.

Risk Factors
Hidden password field indicates credential harvesting
Credential collection on a domain with no known reputation or ranking
Domain appears to be newly created or unregistered (no age data)
Use of a generic brand name (Webmail) on a non‑official domain
Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(38%)

Domain Information

The domain name 'snip.ly' uses the Libyan country-code top-level domain (.ly) while skipping any subdomain. Count 4 characters in 'snip' holding one vowel versus 3 consonants. Tokenizing the label suggests one word: snip. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://snip.ly/x4psb8

Page Load Overview

9.36s
Total Load Time
23
HTTP Requests
5
Domains
374 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,309 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software38% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
38%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.250.186.99United States
AS15169GOOGLE
1142.250.186.131United States
AS15169GOOGLE
1142.250.185.106United States
AS15169GOOGLE
1104.20.47.26United States
AS13335CLOUDFLARENET
1142.250.185.131United States
AS15169GOOGLE
1188.166.132.94Amsterdam, North Holland, Netherlands
AS14061DIGITALOCEAN-ASN
1142.250.186.42United States
AS15169GOOGLE
1142.250.185.99United States
AS15169GOOGLE
12606:4700:10::6814:2f1aUnited States
AS13335CLOUDFLARENET
12a00:1450:4001:82a::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
2316--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11D24A1B1D54C10DA7366C25FFF81B26CAAB9F32BD4164D96F01E9A0C8FD27880191F68

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Fc/Px04YXGdFTyHQLYsNmUoZA5ZQRD8bq9O9fAlNEv0U9n:W/Px0yFTcUoZaZUD82OyU9n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:226703:LAKWEDiKpKgkEnBAAUIayIZERRgDGBSX5yQlaBGMIAVgR2ImABJSGJpiRUBIgwmACDhXkMEGDUgAtCEgkElRQybwwAIUNBgJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7c3e7ffff
Perceptual Hash:b333c8cc66339999
Difference Hash:0c0c080c06080000
Wavelet Hash:3c24202003273f3f
Color Hash:#86582d

Other Hashes

Crop Resistant:0c0c080c06080000

Scan History

Scan history not available

Unable to load historical scan data