Security Scan Report: feststemning.se

Redirected to:
https://feststemning.no/
Site favicon
Submitted: Oct 9, 2026, 10:00:14 AMCompleted: Oct 9, 2026, 10:01:54 AMpubliccompleted

This website contacted 24 IPs in 3 countries across 17 domains to perform 90 HTTP transactions. The main domain is feststemning.no and was registered 2 years 8 months ago.

Submitted URL: https://feststemning.se

Effective URL:

https://feststemning.no/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Self-branded Norwegian party-supply webshop on feststemning.no with its own account login. No impersonation, payment fields or exfiltration; a single unverified threat-intel hit and .to DNS IDS alerts keep it at moderate risk only.

Risk Factors (4)
Account login form (email + password) on a domain whose age/reputation is unverified (entry-domain age does not transfer to feststemning.no)
Cross-domain redirect from feststemning.se to feststemning.no, so no verifiable history for the destination host
HIGH-severity IDS alerts for DNS lookups of the .to TLD (potentially bad traffic) — weak signal on its own
Single-source, unverified threat-intel listing for third-party resource config1.veinteractive.com (generic abuse-reputation)
Safety Factors (5)
Self-branding: title, meta and Open Graph site name all match the destination domain, no impersonation of another entity
No payment fields and no disguised password fields; the only credential form is the shop's own customer login
Legitimate SSO/same-brand flow: form action posts to feststemning.no, not to a third-party origin
No credential exfiltration, no YARA malware patterns, no known malicious kit in the kit roster
Content is coherent retail catalogue with cart, search and cookie-consent elements typical of a genuine webshop
Domain age information unavailable

Details

Page Title

Borddekking og pynt til bursdag og fest

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'feststemning.se' is registered while skipping any subdomain. The registrable portion 'feststemning' spans 12 characters holding 3 vowels versus nine consonants. Tokenizing the label suggests three words: fest, stem, ning. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://feststemning.se

Page Load Overview

5.49s
Total Load Time
9.3 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:no
Text Length:18,663 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media71% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
71%
corporate
35%
e-commerce
20%

Detected Features

Search
Products
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21193.107.30.114Norway
AS50562IT PAYS AS
3194.63.248.52Norway
AS12996Domeneshop AS
3108.138.7.127Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3193.107.29.107Norway
AS50562IT PAYS AS
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3172.66.161.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.157Google · CDNUnited States
AS15169Google LLC
9024--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147546172D2A529270177D6AD34ED9F10A881412FC7994E437ABC27169F8FE12AD3309F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:bG22fD0B/Q/dRzavX1UtR8wqbQtZK01RzXfTrySWHsR:bG22flzaStR8wqoK01RzXfvySV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:288409:HmKRhQCgTgnACiIhAAyQZIDEkA0SItAJkldDAgJFj4TEIjCSbUE6jwwUvADBCKTF2AAhhSsiwDzIwksF0BkSgIVsUAiaIQgB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0008181818180000
Perceptual Hash:99c926932e8799cb
Difference Hash:2993333233321b0f
Wavelet Hash:ff48999b99998381
Color Hash:#311f93

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data