Security Report: fsn.ssffaa4.xyz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8360bfd7-c464-4860-9112-f172cdc5d0a7 Domain and IP registration (RDAP)/api/v1/rdap/8360bfd7-c464-4860-9112-f172cdc5d0a7 Certificate Transparency/api/v1/ct/2026-09-13.urldance.com How often this domain was scanned/api/v1/domain/stats/fsn.ssffaa4.xyz Scan history for this domain/api/v1/domain/history/fsn.ssffaa4.xyz?limit=15

This website contacted 8 IPs in 4 countries across 6 domains to perform 10 HTTP transactions. The main domain is 2026-09-13.urldance.com and was registered 26 years ago.

Submitted URL: https://fsn.ssffaa4.xyz

Effective URL:

https://2026-09-13.urldance.com/english?ssffaa4.xyz

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Stealer-linked domains (Vidar) host a password-gated 'Resource Hub' that redirects to an unrelated domain and runs obfuscated eval/Function JavaScript — treat as malware distribution.

Risk Factors

Primary-domain threat-intel match for the Vidar stealer malware family

Cross-domain redirect to an unrelated final domain (urldance.com)

Password entry prompt without an accompanying username field

Obfuscated JavaScript using eval() and Function() constructors

Low legitimacy profile with generic 'Resource Hub' branding and no verifiable operator identity

Domain age information unavailable

Details

Page Title

Resource Library - Premium Content, Secure Access

Scan Type

public

Favicon Hash

MMH3: -1211604309

MD5: 8e8df4f9949952b48d17f1b7bf8e53b3

Domain Name Analysis

The domain 'fsn.ssffaa4.xyz' uses the open generic top-level domain (.xyz) with subdomain 'fsn'. The core label 'ssffaa4' covers 7 characters with 2 vowels and 4 consonants, along with one digit. Breaking it apart gives 5 words: s, s, ffa, a, 4. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

13.22s

Total Load Time

58 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:x-default

Text Length:261 chars

Detector Agreement:100%

Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

adult content49% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

49%

government public service

36%

documentation technical

35%

news media journalism

35%

cryptocurrency blockchain

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	156.225.108.42	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	156.225.108.43	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	54.215.31.113Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
1	156.225.108.41	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	43.159.107.113	Singapore	AS139341ACE
1	106.74.32.242	China	AS133118China Unicom IP network
1	14.215.183.79	China	AS4134Chinanet
1	111.45.3.198	China	AS9808China Mobile Communications Group Co., Ltd.
10	8	-	-