Security Scan Report: christmasbag.top

Submitted: Oct 27, 2025, 11:15:59 AMCompleted: Oct 27, 2025, 11:17:20 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is christmasbag.top and was registered NaN years ago.

Submitted URL: http://christmasbag.top/testimonial.html

AI Security Verdict

Moderate Risk

Confidence: 70%

6
Risk Score

New, unranked domain with circular redirect; no malicious content but warrants caution.

Risk Factors
Domain age less than 7 days (critical risk)
Circular redirect detected (strong indicator of malicious behavior)
Safety Factors
No credential or payment forms present
No malicious Indicators of Compromise matches found
Page returns a 404 Not Found response
Domain age information unavailable

Details

Page Title

404 Not Found

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'christmasbag.top' on the .top top-level domain and has no subdomain. Its registrable label 'christmasbag' stretches across 12 characters split between three vowels and nine consonants. Tokenizing the label suggests two words: christmas, bag. Average segment length settles at 6 characters. Most frequently, 'christmas' shows up in Danish. You may catch it in English and Chinese (Pinyin) as well. Overall, 'christmasbag.top' reads as Danish.

Screenshot

Security scan screenshot of http://christmasbag.top/testimonial.html

Page Load Overview

22.31s
Total Load Time
4
HTTP Requests
1
Domains
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:267 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.138.38.32Strasbourg, Grand Est, France
AS29066velia.net Internetdienste GmbH
41--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19821353EC2C1520AE0270164FB91F7982659821291670F713A5EB1B6F6CC0F752936C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:HGD6FJRA3ZsjNQCRtgoLY95Mu56+eMHLFCOXAkRcfRrzd0Ll72rKv:H669j2CZLY5Mc6NMLYzkYKLlOy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1230:AAAAIDAAAAQACAAACQAAAACAAAAAAAAAAAEAAAITAADAAAAAAAAAAAEUAqAAAAAAAgAAAAAAEAAAAEAgAAAAABAAAAIAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7ffffff00
Perceptual Hash:e6a25d9966b26698
Difference Hash:08000c0c10000008
Wavelet Hash:0000040400080300
Color Hash:#2d8386

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data