Security Scan Report: www.xchangetickets.com

Submitted: Oct 4, 2026, 9:18:15 AMCompleted: Oct 4, 2026, 9:19:23 AMpubliccompleted

This website contacted 10 IPs in 2 countries across 9 domains to perform 54 HTTP transactions. The main domain is xchangetickets.com and was registered 18 years ago.

Submitted URL: https://www.xchangetickets.com/festival-tickets/glastonbury-festival-tickets/

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Established self-branded secondary ticket marketplace (XchangeTickets). No credential/payment forms, no Indicators of Compromise, no YARA malware. Only generic .to DNS IDS policy alerts. Low risk; resale prices may exceed face value.

Safety Factors (5)
Established 9-year-old domain with legal pages (terms, privacy)
No credential or payment form on the page (search only)
No threat-intel, YARA or kit-roster matches against page or resources
Self-branded content matching its own domain rather than impersonating a different brand
Cross-origin scripts are standard, top-ranked services (Google, DoubleClick, Tawk.to)
Domain age information unavailable

Details

Page Title

Glastonbury Festival Tickets | Buy Glastonbury Festival Tickets - XchangeTickets.com

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.xchangetickets.com' is registered and includes subdomain 'www'. The core label 'xchangetickets' covers 14 characters containing four vowels alongside ten consonants. Segmentation suggests three words: x, change, tickets. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.xchangetickets.com/festival-tickets/glastonbury-festival-tickets/

Page Load Overview

3.31s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8,259 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media65% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
65%
phishing scam
46%
blog personal website
40%
corporate
35%
adult content
29%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9195.20.18.47Chisinau, Chișinău Municipality, Moldova
AS48753Ava Host Srl
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5142.251.110.149Google · CDNUnited States
AS15169Google LLC
5104.20.42.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.161.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.154.119Google · CDNUnited States
AS15169Google LLC
5142.251.155.119Google · CDNUnited States
AS15169Google LLC
5410--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D26340975342243ECB33C5C63FE0BB9FB0BB052FC6468A50BDAD56866F40D5A98C641E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:KnEPghuj6Leymeb906+4aVcmuz6/LSL6AnP:Sgj6LXjsuc0pP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71723:CkSdDAygEMmKlQAQXSYkYTFEoZQBADDPGBhkAGcBBQIAAPaDiICAQwiMBZ0J4eWTIJCaA+AEQhQIP1keSSGQFRoBIIjsSNJg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fff9dfdfcbdfcb
Perceptual Hash:b94f363626464b4b
Difference Hash:2b302b3e333b3333
Wavelet Hash:00cfb8dec383cf83
Color Hash:#2dd298

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data