Security Scan Report: tankestigen.se

Site favicon
Submitted: Oct 2, 2026, 6:50:18 AMCompleted: Oct 2, 2026, 6:51:00 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Swedish blog domain repurposed as an SEO-spam content farm pushing unlicensed casino/betting links. No credential harvesting, payment forms, or malware, so moderate risk rather than phishing.

Risk Factors (3)
SEO spam / low-quality content farm pattern with unrelated scraped headlines and 'Sponsored News' blocks
Promotion of online casinos and betting sites without Swedish license ('utan svensk licens', 'utan spelpaus')
Third-party asset loaded from a domain (contabostorage.com) carrying a generic abuse-reputation tag
Safety Factors (5)
Domain is 1680 days old (registered 2022-02-24), well-established by age
No password, disguised-password, or payment fields on the page
No brand impersonation — the site displays its own brand matching the domain
No JavaScript malware / YARA hits and no credential exfiltration or cross-origin form submission
Only IDS alerts are informational (ET INFO ZeroSSL certificate)
Domain age information unavailable

Details

Page Title

Tankestigen - En blogg om filosofi, livet och personlig utveckling

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'tankestigen.se' is registered while skipping any subdomain. The second-level label 'tankestigen' is 11 characters long with four vowels and 7 consonants. Tokenizing the label suggests 4 words: tank, est, i, gen. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tankestigen.se

Page Load Overview

2.71s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12,901 chars
Detector Agreement:60%

Website Classification

Primary Category

news media journalism55% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
55%
adult content
54%
government public service
46%
entertainment media
43%
corporate business
34%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6209.126.15.85St Louis, Missouri, United States
AS40021Contabo Inc.
6104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6209.126.15.84St Louis, Missouri, United States
AS40021Contabo Inc.
376--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15964407198F6113F2293D2A9A6349F0B9990D5CBCEA3655F71BE07484FC9FC209A3358

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:AK6mM1qePrH3Mf9L66kiKCeT2fSjTMK9D0RofsQhWy/+rQy:Al3Mf9zkNRhWy2rQy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:308117:Am64ECABTEAD+taSAG7SYlEkCAUQgk52FhFUKiiFCguFXaAmkIggoAkhIQVoCWLALADUmcpQYgHMcGEAAoigFvStRIichMUC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data