ScanMalware.com

Security Scan Report: lemmesleep.se

Redirected to:
https://www.pianotransport.es/
Site favicon
Submitted: Sep 28, 2026, 11:20:07 PMCompleted: Sep 28, 2026, 11:22:02 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/92f886aa-85d7-43cd-af8d-680f50c9151dDomain and IP registration (RDAP)/api/v1/rdap/92f886aa-85d7-43cd-af8d-680f50c9151dCertificate Transparency/api/v1/ct/pianotransport.esHow often this domain was scanned/api/v1/domain/stats/lemmesleep.seScan history for this domain/api/v1/domain/history/lemmesleep.se?limit=15

This website contacted 77 IPs in 7 countries across 51 domains to perform 279 HTTP transactions. The main domain is pianotransport.es and was registered 26 years ago.

Submitted URL: https://lemmesleep.se

Effective URL:

https://www.pianotransport.es/
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

3
Risk Score

Unrelated Swedish domain redirects across domains to a Spanish host serving Indonesian slot-gambling (VEGAS123) spam with scraped Samsung markup. No credential/payment forms or malware, but illegal gambling content and hijack-style redirects make it unsafe.

Risk Factors (4)
Illegal online gambling / slot (judi) promotion targeting Indonesian users
Cross-domain redirect chain from an unrelated aged domain, indicating hijacked or black-hat SEO infrastructure
Domain name/content mismatch (pianotransport.es serving slot-gambling spam)
Scraped third-party (Samsung) markup and forms embedded in a gambling page
Safety Factors (7)
No password, disguised-password, or payment fields on the page
No JavaScript YARA malware matches
No threat-intelligence Indicators of Compromise against the page or its resources
No network IDS alerts; no credential exfiltration detected
Cross-origin requests (Samsung, analytics, ad CDNs) are typical of the scraped template and not themselves malicious
Established domain (9588 days old) with no strong malicious indicators — risk clamped from 7 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

VEGAS123: Situs Slot Gacor Jackpot Terbesar 2026 Agen Toto Gratis Spins Terbaru

Scan Type

public

Domain Name Analysis

The domain 'lemmesleep.se' uses the Swedish country-code top-level domain (.se). The core label 'lemmesleep' covers 10 characters holding 4 vowels versus six consonants. Tokenizing the label suggests 2 words: lemme, sleep. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lemmesleep.se

Page Load Overview

43.36s
Total Load Time
9.9 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id-ID
Text Length:24,661 chars
Detector Agreement:60%

Website Classification

Primary Category

e-commerce shopping72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

e-commerce shopping
72%
gambling betting
68%
entertainment media
52%
technology software
49%
blog personal website
47%

Detected Features

Search
Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
51172.67.221.250Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.222.81Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.72.7Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.216.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.75.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
323.52.180.53Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
388.221.168.51Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
388.221.168.237Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
313.226.244.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
27977--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B0E4F86094F02837019781C5F7D5AB0BBFA5E20BE90A84527BAC1FE41FC7E939A1752D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:11r2G14aGmA/NpnyF7eIQTyCyV9cLQxayEMsO6Wp0vcj7PRBI:z2G14aGmA/NZyleBTyCyV9cLa56aNa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:691534:LAop6AYKDiKAJuBQFYkIIQogcEEBQBGhcCmSKd0BMoCVARGjsoGDEobIoIQEEgCKTBDURgB0IFmQUoAZENx1AEXCoSoSUeoU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:187e387c6c7e6620
Perceptual Hash:c0d83e3367641d67
Difference Hash:f0f0f0f0c4d4cccc
Wavelet Hash:187f7878667e6222
Color Hash:#539aac

Other Hashes

Crop Resistant:564646800200200e,968ccc17862f13b6,f0f0f0f0c4d4cccc

Scan History

Scan history not available

Unable to load historical scan data