Security Scan Report: 123movies.se

Redirected to:
https://ww17.123movies.se/
Site favicon
Submitted: Oct 6, 2026, 4:00:43 AMCompleted: Oct 6, 2026, 4:01:46 AMpubliccompleted

This website contacted 15 IPs in 5 countries across 10 domains to perform 21 HTTP transactions. The main domain is ww17.123movies.se and was registered 29 years ago.

Submitted URL: https://123movies.se

Effective URL:

https://ww17.123movies.se/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Aging '123movies' streaming-brand domain serving a near-empty page via a rotating ww17 subdomain; no forms, no malware, no impersonation of a distinct entity, so evidence stays circumstantial at moderate risk.

Risk Factors (3)
Hostname and rotating ww17 subdomain match the '123movies' unauthorized-streaming brand rather than an official service domain
Page renders no real content beyond a privacy opt-out link, consistent with a rotating/placeholder front for a piracy domain
Thin page with third-party ad/consent scripts and no ownership, legal, or contact information
Safety Factors (4)
Domain is 545 days old (ESTABLISHED age band), which does not match a freshly registered phishing domain
Zero forms: no credential, login, or payment fields were found in the captured DOM
No cross-origin credential exfiltration and no cross-origin JS network targets observed
No JavaScript malware patterns, no high-precision YARA hits, and no known malicious kit in the roster
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name '123movies.se' uses the Swedish country-code top-level domain (.se). The core label '123movies' covers 9 characters split between 3 vowels and 3 consonants; bonus characters include three digits. Word splitting yields two words: 123, movies. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://123movies.se

Page Load Overview

5.69s
Total Load Time
314 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7103.224.182.238San Diego, California, United States
AS133618Trellian Pty. Limited
118.245.60.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.204.240.1Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1208.91.196.95British Virgin Islands
AS40034Confluence Networks Inc
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.237.101.74Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1195.181.170.18Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1212.147.230.166Finland
AS202053UpCloud Ltd
1195.181.175.40Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2115--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CFE2B41485F1042549977025DEBF6E8837654A23748CED08BD8C9A40FFAE9B74DBABF0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+ZBsjBjrAyhtbgt4MiIO/5/9SLq07agLg/myUs9c4LxyUs9c4LaQp:aMMtL+TU+c4QU+c4eU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31239:g1WASjCGOwZQQcIJJbYlUTCwCEQF3PmFDAw0QCAoAIIAQoIADsFEE8zMkxBagjwBASKMk6ENwCSrAJ1oKHWMoIMEW05sCyNg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0042c300000000ff
Perceptual Hash:b064b64c9b4e9a2f
Difference Hash:96969696b2b2b23b
Wavelet Hash:00ffffc3081810ff
Color Hash:#2dc5d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data