Security Report: har.ssffaa4.xyz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/991beae1-2cf3-4e96-9090-adbaef2adbb1 Domain and IP registration (RDAP)/api/v1/rdap/991beae1-2cf3-4e96-9090-adbaef2adbb1 Certificate Transparency/api/v1/ct/2026-09-16.urldance.com How often this domain was scanned/api/v1/domain/stats/har.ssffaa4.xyz Scan history for this domain/api/v1/domain/history/har.ssffaa4.xyz?limit=15

This website contacted 7 IPs in 4 countries across 6 domains to perform 8 HTTP transactions. The main domain is 2026-09-16.urldance.com and was registered 26 years ago.

Submitted URL: https://har.ssffaa4.xyz

Effective URL:

https://2026-09-16.urldance.com/english?ssffaa4.xyz

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'verify password' resource gate on a host whose parent domain is reported by multiple feeds as the Vidar infostealer. Password harvesting plus obfuscated JS and cross-domain redirect: do not enter anything.

Risk Factors (5)

Multi-source threat-intel match naming the Vidar infostealer malware family on the page's own domain

Fake 'enter password to access' gate capturing a password with no username — credential harvesting pattern

Cross-domain redirect to unrelated dating/naming domain (urldance.com) with a date-based subdomain

Obfuscated JavaScript (eval + Function() constructor) unrelated to any visible page functionality

Third-party analytics/tracking endpoints (51.la, baidu, 72.chat) alongside the gate page

Domain age information unavailable

Details

Page Title

Resource Library - Premium Content, Secure Access

Scan Type

public

Favicon Hash

MMH3: -1211604309

MD5: 8e8df4f9949952b48d17f1b7bf8e53b3

Domain Name Analysis

The domain 'har.ssffaa4.xyz' uses the open generic top-level domain (.xyz) and includes subdomain 'har'. The second-level label 'ssffaa4' is 7 characters long containing 2 vowels alongside four consonants; it also includes 1 digit. Breaking it apart gives 5 words: s, s, ffa, a, 4. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.30s

Total Load Time

44 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:x-default

Text Length:259 chars

Detector Agreement:100%

Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

adult content45% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

45%

news media journalism

29%

documentation technical

29%

government public service

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	156.225.108.42	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	54.215.31.113Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
1	156.225.108.41	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	156.225.108.43	Hong Kong	AS139057Edgenext Legend Dynasty Pte. Ltd.
1	125.74.108.43	China	AS141998China Telecom
1	14.215.183.79	China	AS4134Chinanet
1	43.159.107.113	Singapore	AS139341ACE
8	7	-	-