Security Scan Report: netauth-whatsapp.com

Redirected to:
https://de.yahoo.com/?p=us
Site favicon
Submitted: Completed: publiccompleted
This website contacted 43 IPs in 6 countries across 48 domains to perform 1121 HTTP transactions. The main domain is netauth-whatsapp.com and was registered 3 days ago.

Submitted URL: https://netauth-whatsapp.com

Effective URL:
https://de.yahoo.com/?p=us
Redirected

AI Security Verdict

Moderate Risk

Confidence: 82%

5
Risk Score

This disposable or newly registered address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Safety Factors (3)
Final destination de.yahoo.com is the legitimate, long-established Yahoo property and matches the page's own branding
The 4 Suricata alerts are INFO-level generic webshell/access heuristics that the scanner itself flags as informational and fire on normal browsing
Threat-intel match is a single-source, unverified abuse-reputation tag against the redirecting entry host, which does not describe the content rendered
Domain age information unavailable

Details

Page Title

Yahoo! Deutschland | Mail, Wetter, Suche, Politik, Nachrichten, Finanzen, Sport & Videos

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'netauth-whatsapp.com' is registered with no subdomain. The core label 'netauth-whatsapp' covers 16 characters split between five vowels and ten consonants; it also includes one hyphen. It segments into six words: net, au, th, what, s, app. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://netauth-whatsapp.com

Page Load Overview

11.19s
Total Load Time
20.1 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:9,680 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
54%
download file sharing
50%
corporate
35%
news media journalism
33%
adult content
30%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29156.234.58.211Hong Kong, Hong Kong
AS138415Yancy Limited
2687.248.119.252United Kingdom
AS203220Yahoo-UK Limited
2687.248.119.251United Kingdom
AS203220Yahoo-UK Limited
263.161.82.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
26188.125.72.139Dublin, Leinster, Ireland
AS34010Yahoo-UK Limited
2654.194.229.35Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
26142.251.110.156Google · CDNUnited States
AS15169Google LLC
26146.75.121.44Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2618.245.46.44Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
26142.251.14.157Google · CDNUnited States
AS15169Google LLC
112143--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T142A57CA550F7E1B6C6AF3EA5A17A2F9A5047C30BAF4407F4B598C2581B2C8BD4D6343C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:Qe3cIyamuXQXlTbfIyamuXQXl4ba4jFezS8XesyqO:a4jFezS8Xesy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2075256:hMelA4iiR4IAEKIBxSACMpSGUWKRqTIJWhAjxoAkAE2oQpOAojQHbyCBBTYoGiSAhMhVcBIVQQiOaScQRcYAAGFEAopBBGwg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data