Security Scan Report: dhcpapi-whatsapp.com

Redirected to:
https://de.yahoo.com/?p=us
Site favicon
Submitted: Completed: publiccompleted
This website contacted 40 IPs in 6 countries across 50 domains to perform 967 HTTP transactions. The main domain is dhcpapi-whatsapp.com and was registered 3 days ago.

Submitted URL: https://dhcpapi-whatsapp.com

Effective URL:
https://de.yahoo.com/?p=us
Redirected

AI Security Verdict

Moderate Risk

Confidence: 88%

5
Risk Score

This disposable or newly registered address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Safety Factors (3)
Final destination de.yahoo.com is the brand owner's own long-established domain
Page content matches the destination brand's genuine German portal with first-party Yahoo infrastructure
Single-source generic abuse-reputation tag is unverified and unrelated to page content
Domain age information unavailable

Details

Page Title

Yahoo! Deutschland | Mail, Wetter, Suche, Politik, Nachrichten, Finanzen, Sport & Videos

Scan Type

public

Domain Name Analysis

Domain 'dhcpapi-whatsapp.com' uses the commercial generic top-level domain (.com). The registrable portion 'dhcpapi-whatsapp' spans 16 characters split between four vowels and 11 consonants, plus one hyphen. Segmentation suggests 5 words: dhcp, api, what, s, app. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dhcpapi-whatsapp.com

Page Load Overview

4.47s
Total Load Time
18.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:11,003 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
53%
download file sharing
47%
news media journalism
36%
corporate
35%
adult content
30%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
31156.234.58.211Hong Kong, Hong Kong
AS138415Yancy Limited
2487.248.119.251United Kingdom
AS203220Yahoo-UK Limited
2487.248.119.252United Kingdom
AS203220Yahoo-UK Limited
243.161.82.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
24142.251.127.157Google · CDNUnited States
AS15169Google LLC
24146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2454.220.29.121Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2487.248.116.217Amsterdam, North Holland, Netherlands
AS203219Yahoo-UK Limited
2434.95.69.49Google · CDNKansas City, Missouri, United States
AS396982Google LLC
24142.251.110.97Google · CDNUnited States
AS15169Google LLC
96740--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F253A36F072C82EF76F1D8971703F296147932AE602EAE9B29CC2555387CF48A6715C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:fcbugsHwAS1FQfMF1qtZS1FQm7FDlZk9hU8AeK5DIExN4zzS8XemF3v:V01qtQFezS8Xes/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:980197:EBCEALTmiA4iAICgfEgIUVARoQkAA7QKEFAHGTEApojtEEAlaAAgYkEESEAKAtR+CCLBiIKmqCGkCAFsxRENRBFIUfzEEKLg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data