ScanMalware.com

Security Scan Report: whereissanta.com

Site favicon
Submitted: Dec 23, 2025, 9:50:12 PMCompleted: Dec 23, 2025, 9:51:08 PMpubliccompleted
Loading additional data...

Summary

This website contacted 47 IPs in 3 countries across 36 domains to perform 152 HTTP transactions. The main domain is whereissanta.com and was registered NaN years ago.

Submitted URL: https://whereissanta.com/mall/0299?hsLang=en

The Cisco Umbrella rank of the primary domain is #555,781 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

Legitimate booking page for Santa; no security concerns detected.

Safety Factors
Well‑established domain with long registration history
No credential or payment collection forms
No malicious Indicators of Compromise detected
Content appears to be a legitimate booking service for a public event
Domain age information unavailable

Details

Page Title

Where Is Santa - Independence Mall

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate

(50%)

Domain Information

You're looking at domain 'whereissanta.com' on the commercial generic top-level domain (.com) without a subdomain. The second-level label 'whereissanta' is 12 characters long with five vowels and seven consonants. Breaking it apart gives 3 words: where, is, santa. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://whereissanta.com/mall/0299?hsLang=en

Page Load Overview

12.71s
Total Load Time
152
HTTP Requests
36
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,418 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14108.156.22.77United States
AS16509AMAZON-02
3104.20.17.167United States
AS13335CLOUDFLARENET
352.219.102.202Columbus, Ohio, United States
AS16509AMAZON-02
3216.58.209.206United States
AS15169GOOGLE
3216.58.209.202United States
AS15169GOOGLE
3108.156.22.43United States
AS16509AMAZON-02
3108.156.22.42United States
AS16509AMAZON-02
318.165.140.83United States
AS16509AMAZON-02
3216.58.210.163United States
AS15169GOOGLE
3104.16.111.254United States
AS13335CLOUDFLARENET
15247--

Detected Technologies6

Open-Graph-Protocolvwebsite
100%
Google-AnalyticsvUniversal
100%
HubSpot CMS
55%
Amazon Web Services
50%
HTTP/3
40%
Amazon CloudFront
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B6C34D664110343E036747C9B9E1F74BA6AF835AC7B2459DFCEC012913CAD6ADB1B4E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:r4r54rVjZe+ism9brbGxUYGbMbBbbb9bgbPbEsHgnrtTwlOMWJV27/TwDwSTibk9:Ve+ismUrtTnMWT27/TEbTv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:127625:AAVlIAYgplQQTABqmIA0HEgIUZgUiChYBGLKPIBZsMpA5BgIhpkIUDhpcKhANXygACYAgQCGhAEIykBMwI6pJToB0CAoa1sA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0f0ffdfdfdfd7d
Perceptual Hash:9a3d14e2c2c6c6bd
Difference Hash:613a386959d91999
Wavelet Hash:bc0e0eadad6d0d0d
Color Hash:#5354ac

Other Hashes

Crop Resistant:613a386959d91999,697852d296be9a9b

Scan History

Scan history not available

Unable to load historical scan data