Security Scan Report: xmastans.shop

Site favicon
Submitted: Completed: publiccompleted
This website contacted 46 IPs in 5 countries across 34 domains to perform 107 HTTP transactions. The main domain is xmastans.shop.

Submitted URL: https://xmastans.shop/

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Clones minube travel site on xmastans.shop; brand impersonation with ad redirects but no credential collection.

Risk Factors (4)
Brand impersonation of minube on a mismatched domain
Excessive redirect chain through ad networks
Unranked domain with unknown age
Uses another site's branding, content, and assets without authorization
Domain age information unavailable

Details

Page Title

minube: viajes, actividades, opiniones de qué ver y dónde dormir

Scan Type

public

Domain Name Analysis

You're looking at domain 'xmastans.shop' on the commerce-oriented generic top-level domain (.shop) with no subdomain. Count 8 characters in 'xmastans' containing 2 vowels alongside six consonants. Splitting it apart reveals 2 words: xmas, tans. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Ó minube á Michael Lewington Q Escribe aquí tu destino ¿Por qué planificar tu viaje con minube? Conoce la opinión de los usuarios sobre la comunidad de viajeros que les anima a recorrer el mundo...

Page Load Overview

2.56s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-ES
Text Length:2,314 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing87% confidence
Type: spa
Method: ml+structural

All Detected Categories

download file sharing
87%
travel tourism
71%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
178.211.197.188London, England, United Kingdom
AS45102Alibaba (US) Technology Co., Ltd.
2185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2169.150.247.39Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2169.150.247.40Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2169.150.247.36Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
2185.152.64.17Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.14.154Google · CDNUnited States
AS15169Google LLC
10746--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F553393936397637482316E2997AFB0CB4B7413E9C23C07AFDEDC66657C0E919827099

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:YKCCX0RxBQQB4wlFtq6x97ucnGnZnenjWhA55nsnyskCnGnsnPnzn7calrpggQgW:YKCxFtDWRZzBj2y2n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:64182:gRB8BApcVBRYBIgUDCZljooAM4aPMCEjbENAnSCJADAQCERwgBIRiMBSEBwIUhZgbCFR8fGqoQJhbMgEMCAIoAgCEVhIjpoE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f1c080c0ffffffff
Perceptual Hash:f25a8eada1718d8c
Difference Hash:410500080a640e96
Wavelet Hash:80800080e3ffffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data