Security Report: dfaz.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b4680012-2822-46d4-878b-2e6a023a6af9 Domain and IP registration (RDAP)/api/v1/rdap/b4680012-2822-46d4-878b-2e6a023a6af9How often this domain was scanned/api/v1/domain/stats/dfaz.net Scan history for this domain/api/v1/domain/history/dfaz.net?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 27 HTTP transactions. The main domain is dfaz.net and was registered 1 month ago.

Submitted URL: https://dfaz.net/nextcloud/

Effective URL:

https://cloud.dfaz.net/login

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Clean self-hosted Nextcloud login on a 12-day-old, unranked domain with no impersonation, exfiltration, IoC or malware. New-domain login pages warrant caution (MODERATE_RISK), not a scam verdict.

Risk Factors (2)

Domain registered 12 days ago (VERY_NEW) and unranked — weak prior, not proof of wrongdoing

Credential (password) login form hosted on a very new, reputationless domain

Safety Factors (5)

Standard self-hosted Nextcloud instance running on the operator's own registered domain (self-branding, no third-party impersonation)

Form action '/login' on cloud.dfaz.net — same registrable domain as dfaz.net, no external form action

CSRF protection token (requesttoken) and email redirect path identical to the genuine Nextcloud login template

No payment fields, no cross-origin credential submission, no obfuscated or exfiltrating JavaScript

Clean threat-intel, hunting rule, native-hunting rule, kit-roster and IDS results

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1856593110

MD5: 82d1a9b9f66d5ea550b8ec221e62a521

Domain Name Analysis

The domain 'dfaz.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The registrable portion 'dfaz' spans 4 characters with 1 vowel and 3 consonants. Breaking it apart gives 2 words: df, az. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.15s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:283 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

76%

documentation technical

39%

real estate property

27%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
27	176.44.73.81	Riyadh, Riyadh Region, Saudi Arabia	AS25019Saudi Telecom Company JSC
27	1	-	-

Detected Technologies3

PasswordField

100%

Open-Graph-Protocolvwebsite

100%

Nginxv1.27.5

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6F45AE7A8583532A923C319708F962A3357B10309215A85D5CE70890FFB7ED77B1A6F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:8bm8jofQjICmcuPFdtyp/n1/MjBji1/6dtyHY+:Qj0QjICmcuPFdgfUjBjIydg4+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:756699:G0oWGigCDJCAKqNo4BkBQEIYghgQwzIgEjEACTAMAkT54AUDFBLJkb0BQEWACCoGiMAxKQgAQreEChBcBBkhAVVy2UEzAoEE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008058fdffc7c026

Perceptual Hash:d8593772874085df

Difference Hash:5533b291958f8fc6

Wavelet Hash:008058ffffefc026

Color Hash:#532dd2

Other Hashes

Crop Resistant:1393929292858eea,f3fffffcffffffff,6c4c5eb63686ce67,5533b291958f8fc6,e7cfdf2f0f4f03f1,f0d3d8cfdfff7fff

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: dfaz.net