Security Report: bfg.ssffaa4.xyz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6cb6b6d2-f8be-4c6e-934e-97f55996de3a Domain and IP registration (RDAP)/api/v1/rdap/6cb6b6d2-f8be-4c6e-934e-97f55996de3a Certificate Transparency/api/v1/ct/2026-09-16.urldance.com How often this domain was scanned/api/v1/domain/stats/bfg.ssffaa4.xyz Scan history for this domain/api/v1/domain/history/bfg.ssffaa4.xyz?limit=15

This website contacted 8 IPs in 4 countries across 6 domains to perform 9 HTTP transactions. The main domain is 2026-09-16.urldance.com and was registered 26 years ago.

Submitted URL: https://bfg.ssffaa4.xyz

Effective URL:

https://2026-09-16.urldance.com/english?ssffaa4.xyz

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Domain is flagged multi-source as Vidar malware and serves a fake 'Resource Hub' password gate with a password-only form — no legitimate service present. Treat as malicious.

Risk Factors (5)

Content-malware Indicator of Compromise (Vidar stealer) matching the scanned primary domain

Password-only form with no username — credential-harvesting pattern

Fake premium-resource gate used as lures for credential capture and malware delivery

Cross-domain redirect from a flagged host to an unrelated domain

ML classifier labels page as adult content (53%)

Domain age information unavailable

Details

Page Title

Resource Library - Premium Content, Secure Access

Scan Type

public

Favicon Hash

MMH3: -1211604309

MD5: 8e8df4f9949952b48d17f1b7bf8e53b3

Domain Name Analysis

You're looking at domain 'bfg.ssffaa4.xyz' on the open generic top-level domain (.xyz) and includes subdomain 'bfg'. Count 7 characters in 'ssffaa4' split between 2 vowels and four consonants; bonus characters include one digit. Tokenizing the label suggests five words: s, s, ffa, a, 4. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.22s

Total Load Time

55 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:x-default

Text Length:261 chars

Detector Agreement:100%

Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

adult content53% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

53%

news media journalism

37%

government public service

36%

documentation technical

34%

cryptocurrency blockchain

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	156.225.108.41	Singapore	AS4837CHINA UNICOM China169 Backbone
1	54.215.31.113Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
1	156.225.108.43	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	156.225.108.42	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	111.45.11.83	China	AS9808China Mobile Communications Group Co., Ltd.
1	43.159.107.113	Singapore	AS139341ACE
1	14.215.183.79	China	AS4134Chinanet
1	218.60.100.155	China	AS4837CHINA UNICOM China169 Backbone
9	8	-	-