ScanMalware.com

Security Scan Report: fghse.r.ag.d.sendibm3.com

Redirected to:
https://boostkungen.se/product/kop-tiktok-likes/?utm_source=brevo&utm_...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6fb31041-4d2c-40df-85ce-9cec437111ddDomain and IP registration (RDAP)/api/v1/rdap/6fb31041-4d2c-40df-85ce-9cec437111ddHow often this domain was scanned/api/v1/domain/stats/fghse.r.ag.d.sendibm3.comScan history for this domain/api/v1/domain/history/fghse.r.ag.d.sendibm3.com?limit=15
This website contacted 36 IPs in 5 countries across 21 domains to perform 167 HTTP transactions. The main domain is sendibm3.com and was registered 11 years ago.

Submitted URL: https://fghse.r.ag.d.sendibm3.com/mk/cl/f/sh/1t6Af4OiGsEag2b1lJkJZkVI1qsBAm/na-mUMnu_g3_

Effective URL:
https://boostkungen.se/product/kop-tiktok-likes/?utm_source=brevo&utm_...
Redirected

The Cisco Umbrella rank of the primary domain is #70,266 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Swedish store openly selling TikTok likes/views on its own established domain; no credential or payment harvesting, no impersonation, no malware. Only signals are a grey-area service and a reputation-only tag on a third-party redirector address.

Risk Factors (2)
Service offering paid TikTok likes/views/followers sits in a grey area and may violate platform terms, though it is openly described and priced.
Marketing redirect chain (4 cross-domain hops) means entry-domain reputation and age describe the email redirector, not the destination site.
Safety Factors (4)
Destination domain boostkungen.se is ranked in the Cisco Umbrella top 100K (~70k) and is a functioning WooCommerce store with 171 product reviews and extensive original Swedish-language content.
No credential or payment collection on the landing page (payment handled at checkout via Swish/Apple Pay/card); explicit messaging that no TikTok password is required.
Forms post same-origin to boostkungen.se; no exfiltration, no obfuscated or malicious JavaScript, no hidden password or card fields.
Physical address and contact/footer structure present; legitimacy indicator of a multi-year operation.
Domain age information unavailable

Details

Page Title

Köp TikTok Likes – 1 000 st för 79 kr + gratis visningar

Scan Type

public

Domain Name Analysis

Domain 'fghse.r.ag.d.sendibm3.com' uses the commercial generic top-level domain (.com) and includes subdomain 'fghse.r.ag.d'. Count 8 characters in 'sendibm3' holding 2 vowels versus five consonants; it also includes one digit. Breaking it apart gives three words: send, ibm, 3. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fghse.r.ag.d.sendibm3.com/mk/cl/f/sh/1t6Af4OiGsEag2b1lJkJZkVI1qsBAm/na-mUMnu_g3_

Page Load Overview

3.78s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:39,523 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network99% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
99%
entertainment media
98%
e-commerce shopping
78%
technology software
78%
adult content
65%

Detected Features

Search
Products
Comments
OG: product
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
272.24.160.181Vilnius, Vilnius, Lithuania
AS47583Hostinger International Limited
4172.246.243.65Paris, Île-de-France, France
AS200484Sendinblue SAS
4141.101.90.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
420.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
423.36.162.220Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4150.171.109.104Azure · CLOUDUnited States
AS8075Microsoft Corporation
423.45.103.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
44.153.72.49Azure · CLOUDBoydton, Virginia, United States
AS8075Microsoft Corporation
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
16736--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19FB41CE3F0B8103B711F31A87649779D79B76203DB8145A4B7FD7368DB42A8A267220D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:bUVlAUgbu2iiQWbYYs8Ytt4Z+dQoBX04JOeMDkoD+ytBBG2MVqkjwH9iq/Aeq:YAUgbu2iiQWbYYsqDvDVtBknh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:533121:S4M8JYGBQoQEDj0gUQoMziCGAgCOiQkAA8KeVbAIkgIBwl6KYoBwZSIhAYAktgK0CtACLlBANbcGfW4SA6EIJxtbYKocEJRQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008f8f8fcfffe7e7
Perceptual Hash:b81867c747234d67
Difference Hash:b73e363e36460d4c
Wavelet Hash:00838b8783f7e7e6
Color Hash:#8479d2

Other Hashes

Crop Resistant:b73e363e36460d4c,4d484a049013696d,0935b5b2b2353108,2baecad896566b69,0f32797968686870

Scan History

Scan history not available

Unable to load historical scan data