Security Scan Report: quack-sushi.xyz

Redirected to:
https://forsale.godaddy.com/forsale/quack-sushi.xyz?utm_source=TDFS_BI...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 8 domains to perform 61 HTTP transactions. The main domain is quack-sushi.xyz and was registered 1 month ago.

Submitted URL: https://quack-sushi.xyz/

Effective URL:
https://forsale.godaddy.com/forsale/quack-sushi.xyz?utm_source=TDFS_BI...
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Domain-for-sale parking page on GoDaddy's own marketplace; the entry domain carries a single-source, unverified wallet-drainer report that drives the escalation despite a clean, form-free rendered page.

Risk Factors (2)
Single-source, unverified threat-intel report labeling the entry domain as a wallet drainer (phishing)
The domain in the URL (quack-sushi.xyz) has a history of being associated with malicious activity before being parked; visitors may reach it from stale or malicious links
Domain age information unavailable

Details

Page Title

quack-sushi.xyz steht zum Verkauf: jetzt sichern für 799,00 $ | GoDaddy

Scan Type

public

Domain Name Analysis

Domain 'quack-sushi.xyz' uses the open generic top-level domain (.xyz) with no subdomain. The second-level label 'quack-sushi' is 11 characters long with four vowels and 6 consonants, along with 1 hyphen. Word splitting yields 2 words: quack, sushi. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://quack-sushi.xyz/

Page Load Overview

1.74s
Total Load Time
916 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:854 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1276.223.54.146Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
788.221.168.57Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
723.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
723.222.81.16Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
7142.250.154.156Google · CDNUnited States
AS15169Google LLC
72.23.245.17Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
723.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
732.186.243.157Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
618--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18C34D92AE32E8CBECE1537C428957917706F6129CE202799F7D98F3863595F8009BE17

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:W7oAXKx1XoT9660l3hS7igz/Fd3lYMXzQy+y4JftuFxi6XVG3hxiHXVfZCUSjXIS:jcKx1XoTJ0l3h8iOni6lGolfZCXEC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:249102:AEkFE0mEIEMziZCjCOgcI1DoiOVFlEVR1ljgASbgQEgwKAfEM0kKYwmLSAFSgQBAALgCMggsg4CKCiaQCAGuTjIhRhHwLA6h

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000004fbffffffff
Perceptual Hash:92120bededed9292
Difference Hash:73cccc322632386c
Wavelet Hash:00000400ffffff7f
Color Hash:#e06cd8

Scan History

Scan history not available

Unable to load historical scan data