Security Scan Report: bst.ssffaa4.xyz

Redirected to:
https://2026-09-14.urldance.com/english?ssffaa4.xyz
Site favicon
Submitted: Sep 14, 2026, 8:47:57 AMCompleted: Sep 14, 2026, 8:48:47 AMpubliccompleted

This website contacted 8 IPs in 4 countries across 6 domains to perform 10 HTTP transactions. The main domain is 2026-09-14.urldance.com and was registered 26 years ago.

Submitted URL: https://bst.ssffaa4.xyz

Effective URL:

https://2026-09-14.urldance.com/english?ssffaa4.xyz
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Malware-flagged domain (Vidar stealer, multi-source) presenting a password-only 'verify to access resources' gate — treat as credential-harvesting/stealer infrastructure. Do not enter any password.

Risk Factors (6)
Vidar stealer malware indicators on the domain serving this page (multi-source corroborated)
Password field without any username/email field — credential harvesting pattern
Pretext password gate ('verify password to access resource links')
Cross-domain redirect to urldance.com masks the final content host
eval()/Function() dynamic code generation in page scripts
Unranked domain (not in Cisco Umbrella top 1M) with near-zero legitimacy score (20/100)
Domain age information unavailable

Details

Page Title

Resource Library - Premium Content, Secure Access

Scan Type

public

Domain Name Analysis

You're looking at domain 'bst.ssffaa4.xyz' on the open generic top-level domain (.xyz), featuring subdomain 'bst'. Count 7 characters in 'ssffaa4' with 2 vowels and 4 consonants; it also includes 1 digit. Tokenizing the label suggests 5 words: s, s, ffa, a, 4. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bst.ssffaa4.xyz

Page Load Overview

4.11s
Total Load Time
58 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:261 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

adult content48% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
48%
government public service
35%
documentation technical
34%
news media journalism
34%
cryptocurrency blockchain
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
354.215.31.113Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
1156.225.108.43Hong Kong
1156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.159.107.113Singapore
1111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
1125.74.108.43China
AS141998China Telecom
1183.240.98.228China
AS56040China Mobile communications corporation
108--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T113914D3041F8653F948281C96A39E76FBAD1D84BDA5F4100B6FC6BA44F87EC2DC27258

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:CkbEpKmRsadTu8xR8xR8xR8xsq5qXCEL5CdJrAYjlMJHbSdRdn5Tn9sz5mXDCrlT:CkMKeFx5tFTBSLfEmQgd102u

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4441:QIGQKAARLAEgoBgIARggASCEAhEIACCGAAgDgAoRBEgAACIRAuAADTMAGJCAQC0AgAAggkpDIoACIREAMjgiwEAREQIwUALA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181919191901
Perceptual Hash:887073ce2699d973
Difference Hash:0fb3b3b3b3b3b34f
Wavelet Hash:c0d8191b1f1f1f0f
Color Hash:#79d289

Scan History

Scan history not available

Unable to load historical scan data