ScanMalware.com

Security Scan Report: ellenogknut.no

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/81637c6a-f232-4c88-9194-2c81ca485988Domain and IP registration (RDAP)/api/v1/rdap/81637c6a-f232-4c88-9194-2c81ca485988How often this domain was scanned/api/v1/domain/stats/ellenogknut.noScan history for this domain/api/v1/domain/history/ellenogknut.no?limit=15
This website contacted 5 IPs in 3 countries across 6 domains to perform 57 HTTP transactions. The main domain is ellenogknut.no and was registered 6 years ago.

Submitted URL: https://ellenogknut.no

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Established Norwegian motorhome blog, self-branded, no credential/payment forms and no scanner-side malware evidence; only a single-source unverified malware reputation entry, so caution rather than avoidance.

Risk Factors (1)
Primary domain carries a single-source, unverified community malware report ('iclickfix') that could not be corroborated by any scanner-side evidence — consistent with either a low-quality submission or a possible past/undetected compromise of the WordPress installation
Domain age information unavailable

Details

Page Title

Med Ellen og Knut på tur – Bobilblogg

Scan Type

public

Domain Name Analysis

The domain name 'ellenogknut.no' uses the Norwegian country-code top-level domain (.no) without a subdomain. The registrable portion 'ellenogknut' spans 11 characters split between 4 vowels and 7 consonants. Word splitting yields 3 words: ellen, og, knut. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ellenogknut.no

Page Load Overview

1.54s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nb-NO
Text Length:2,982 chars
Detector Agreement:100%
Language mismatch: Declared as nb-NO but detected as no

Website Classification

Primary Category

news/blog40% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13194.63.249.211Norway
AS12996Domeneshop AS
11142.251.110.95Google · CDNUnited States
AS15169Google LLC
1123.197.141.76Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1152.216.89.13Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
575--

Detected Technologies10

WordPressv7.1.4
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Amazon Web Services
50%
Nginx
40%
jQuery Migrate
20%
MailChimp
20%
Amazon S3
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A730BB290AA51B7375A8BDFF020FF28E68B9916DE0557D9B2F6914CC7C0DF2056610C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:L3ypScPLg9FvipJc0BFlps5sVCbUAcaz6vgKSMlzNfnmHRt:LCsAzNfnmHz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80208:KA7FhDlwXVgYIAMDDIl4jSFAAW7nyICymKpuAggAchgQDZMJANBSUyJKBAvIYfCNyBIAANhIUUMWiAlipK6QJUgNAgAK8VJD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data