ScanMalware.com

Security Scan Report: www.attractiontickets.com

Site favicon
Submitted: Oct 8, 2025, 11:19:23 PMCompleted: Oct 8, 2025, 11:20:40 PMpubliccompleted
Loading additional data...

Summary

This website contacted 71 IPs in 3 countries across 26 domains to perform 185 HTTP transactions. The main domain is attractiontickets.com and was registered NaN years ago.

Submitted URL: https://www.attractiontickets.com/en/paris-attraction-tickets/disneyland-paris-tickets

The Cisco Umbrella rank of the primary domain is #437,280 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Site impersonates Disneyland brand on a low‑ranked domain; likely phishing.

Risk Factors
Brand impersonation of Disney on a low‑ranking domain
Low Cisco Umbrella ranking for a site claiming a major brand
Email/username field on a brand‑impersonating page
Domain age information unavailable

Details

Page Title

Disneyland® Paris Tickets: Best Deals and Offers

Scan Type

public

Language

🇺🇸

English

(66% confidence)

Category

unknown

(0%)

Domain Information

The domain 'www.attractiontickets.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. The registrable portion 'attractiontickets' spans 17 characters with 6 vowels and eleven consonants. It segments into 2 words: attraction, tickets. The median word length lands at 8.5 characters. Most frequently, 'attraction' shows up in English. You will also see it in Chinese (Pinyin) and French contexts. Taken together, it feels English.

Screenshot

Security scan screenshot of https://www.attractiontickets.com/en/paris-attraction-tickets/disneyland-paris-tickets

Page Load Overview

19.73s
Total Load Time
185
HTTP Requests
26
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:66%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:66%
Script Type:Latin
HTML Lang Attribute:en-gb
Text Length:48 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23.171.214.123United States
AS16509AMAZON-02
2104.16.80.73United States
AS13335CLOUDFLARENET
299.84.152.19United States
AS16509AMAZON-02
234.110.153.78Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
2104.18.17.61United States
AS13335CLOUDFLARENET
213.33.220.227New York, New York, United States
AS16509AMAZON-02
218.66.102.106United States
AS16509AMAZON-02
218.66.112.79United StatesUnknown
2172.64.155.119United States
AS13335CLOUDFLARENET
2104.18.16.61United States
AS13335CLOUDFLARENET
18571--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118B44F78472493BC55CBD7ECDF26A4A0224E50EDF1B7839482EDCBB09293ED8E54E494

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:uHSGcFmPfoArK7groLgrxJxm16+L+GwdyCzZpxggMhMjEq3eiuNDBFmLUroRIamo:fF7groLgrxJxoOXLMhMvu9M3BAZD9vS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:500001:pkCDI4KhCAEOP4OCRlOgmchidaIkEkrLWAogSBKYI0xEAAABQIC4CKAiAIEYLARICKlSPgxBNEy0AkMEw9EGhF4XEA7iQROZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc18080e2ffe3f7
Perceptual Hash:ee5aac81576f9224
Difference Hash:55130d0414201747
Wavelet Hash:b1c18080c0fff3f7
Color Hash:#931f5d

Other Hashes

Crop Resistant:55130d0414201747,c9c1a88adad646a7,0123d9d9f9590751,272f0d4f5a54b494,4d8d8fa571d3e3e7

Scan History

Scan history not available

Unable to load historical scan data