ScanMalware.com

Security Scan Report: harpkonst.se

Site favicon
Submitted: Oct 2, 2026, 8:50:12 AMCompleted: Oct 2, 2026, 8:51:11 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Established 11-year-old Swedish artist site with strong self-branding and no credential/payment forms, but it links to a domain reported as a wallet drainer (single unverified source) and pings an unranked appspot script host — worth caution.

Risk Factors (2)
Single-source threat-intel match: external link to im-creator.com reported as a wallet drainer (phishing, unverified)
XMLHttpRequest to unranked domain imos006-dot-im--os.appspot.com of unclear purpose
Safety Factors (6)
Domain is 11 years old and well-established (age 4284 days)
Self-branding detected: title/meta 'harpkonst' matches the domain — no impersonation of another entity
No password, disguised-password or payment fields; no credential exfiltration detected
Rich, coherent legitimate content (biography, discography, gallery, press materials)
Ranked third-party hosts serve analytics/CDN (Google Analytics, gstatic, MailerLite, YouTube)
No YARA malware, no IDS alerts, no kit-roster hits, no Safe Browsing flags
Domain age information unavailable

Details

Page Title

Harpkonst

Scan Type

public

Domain Name Analysis

Domain 'harpkonst.se' uses the Swedish country-code top-level domain (.se) with no subdomain. Its registrable label 'harpkonst' stretches across 9 characters split between 2 vowels and 7 consonants. Splitting it apart reveals three words: harp, kon, st. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://harpkonst.se

Page Load Overview

4.33s
Total Load Time
15.1 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:6,675 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media86% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
86%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2834.49.24.229Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.150.4Google · CDNUnited States
AS15169Google LLC
3142.251.110.121Google · CDNUnited States
AS15169Google LLC
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3142.251.14.132Google · CDNUnited States
AS15169Google LLC
3104.18.34.38Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.64.150.190Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.14.138Google · CDNUnited States
AS15169Google LLC
13336--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14864C711E7096D292007409D6AE47BC8212EE733DB424CE4F6BE656EFF99DA4257338C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:5LCIC3tCKoLOjmqoETQTbGL7hySND8eo4F0:5LCIC3tOqoEcTbkhySND8eo4F0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:334251:AaK0kAYsAys7HImBZgJHIkgjGUdkngGEAZAEBAJYjAwzIIMSgjLFOJc0ACCwgiIQQgFRACIIUIPMaaIAGAQWZiySAo0UjESS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00002060600000ff
Perceptual Hash:e0529b33cd0ddd0d
Difference Hash:d8ccc4c6c6cecece
Wavelet Hash:5c646072626363ff
Color Hash:#2d9bd2

Other Hashes

Crop Resistant:d8ccc4c6c6cecece,d8ccc4c6c6cecece

Scan History

Scan history not available

Unable to load historical scan data