Security Report: pax.ssffaa4.xyz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/89623e63-bdec-4d8e-9712-86dd630ce50e Domain and IP registration (RDAP)/api/v1/rdap/89623e63-bdec-4d8e-9712-86dd630ce50e Certificate Transparency/api/v1/ct/2026-09-12.urldance.com How often this domain was scanned/api/v1/domain/stats/pax.ssffaa4.xyz Scan history for this domain/api/v1/domain/history/pax.ssffaa4.xyz?limit=15

This website contacted 8 IPs in 3 countries across 6 domains to perform 10 HTTP transactions. The main domain is 2026-09-12.urldance.com and was registered 3 months ago.

Submitted URL: https://pax.ssffaa4.xyz

Effective URL:

https://2026-09-12.urldance.com/english?ssffaa4.xyz

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Password-gated redirect page on hosts flagged for the Vidar infostealer (multi-source). Password-only form plus off-domain redirect indicate credential/malware harvesting — avoid interaction.

Risk Factors

Host domain itself listed as Vidar infostealer in multi-source threat intelligence

Password-only form (no username) — credential harvesting shape

Obfuscated/duplicative gate page ending in a cross-domain redirect

eval()/Function() constructor usage in page JavaScript

Unranked domain (not in Cisco Umbrella top 1M) with no legitimate business footprint

Domain age information unavailable

Details

Page Title

Resource Library - Premium Content, Secure Access

Scan Type

public

Favicon Hash

MMH3: -1211604309

MD5: 8e8df4f9949952b48d17f1b7bf8e53b3

Domain Name Analysis

Within the open generic top-level domain (.xyz), 'pax.ssffaa4.xyz' is registered, featuring subdomain 'pax'. The core label 'ssffaa4' covers 7 characters holding 2 vowels versus 4 consonants, along with one digit. It segments into five words: s, s, ffa, a, 4. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.00s

Total Load Time

58 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:x-default

Text Length:261 chars

Detector Agreement:100%

Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

adult content50% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

50%

government public service

35%

documentation technical

35%

news media journalism

34%

cryptocurrency blockchain

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	54.215.31.113Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
1	156.225.108.41	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	156.225.108.42	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	111.45.3.198	China	AS9808China Mobile Communications Group Co., Ltd.
1	156.225.108.43	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	183.240.98.228	China	AS56040China Mobile communications corporation
1	125.74.108.42	China	AS141998China Telecom
1	112.46.240.46	China	AS9808China Mobile Communications Group Co., Ltd.
10	8	-	-