Security Scan Report: christmasopennet.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 9 domains to perform 16 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://christmasopennet.pages.dev/categories/christmas/page/4/

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Auto-generated scraped-content blog on a free pages.dev subdomain with spam-network footer branding. No forms, no impersonation, no malware or Indicators of Compromise — SEO spam only, not a phishing or credential threat.

Risk Factors (4)
Machine-generated scraped content with nonsense keyword headings — classic SEO spam / doorway page
Self-inconsistent footer branding tied to an unrelated .icu domain
Unranked domain with no verifiable identity or ownership
Heavy ad/analytics embedding with outbound links to unrelated low-quality sites
Safety Factors (5)
Self-branding detected: title/meta/second header name matches the domain (christmasopennet), so no third-party brand impersonation
No credential, login or payment form anywhere on the page
No Indicators of Compromise, no hunting rule malware patterns, no malicious kit detected
No cross-origin credential forms and no credential-exfiltration JavaScript
Standard search-only form action (google.com) — no data harvesting
Domain age information unavailable

Details

Page Title

christmas - christmasopennet

Scan Type

public

Domain Name Analysis

The domain name 'christmasopennet.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'christmasopennet'. Its registrable label 'pages' stretches across 5 characters split between two vowels and 3 consonants. Breaking it apart gives 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://christmasopennet.pages.dev/categories/christmas/page/4/

Page Load Overview

0.91s
Total Load Time
231 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,029 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.66.45.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2172.66.46.235Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2172.66.129.60Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2158.69.53.117Montreal, Quebec, Canada
AS16276OVH SAS
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.156Google · CDNUnited States
AS15169Google LLC
168--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15B4120339E08D83E21F28AE1A45E769CD183911DD7A72C70F2E95BDD0BE1FA0CC66545

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:JGOe+umHyn/vDm5yrjc57h0vDm5ytavDm5yvwNhj+cL1T6eEfgVtfrLCf:JG25mm08+m0Um0vY6UVtHCf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2357:gAAAAAAACYAAIAgIwIAAAEAAIMAAAAIAAAABAAQEAAAACEJQACIAABhAAQAAACAIQAAAEAAJAAABAAAQACIAAUAQOIABAACE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfefc3c7c3c3c3e3
Perceptual Hash:b499db989c3c4c6c
Difference Hash:32082e2c262e2e4e
Wavelet Hash:8aee82c7c383c3e3
Color Hash:#93401f

Other Hashes

Crop Resistant:32082e2c262e2e4e

Scan History

Scan history not available

Unable to load historical scan data