ScanMalware.com

Security Scan Report: thegoo.se

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c565bdaa-d04d-4cd4-9aa4-40c8dc954568Domain and IP registration (RDAP)/api/v1/rdap/c565bdaa-d04d-4cd4-9aa4-40c8dc954568How often this domain was scanned/api/v1/domain/stats/thegoo.seScan history for this domain/api/v1/domain/history/thegoo.se?limit=15
This website contacted 8 IPs in 2 countries across 5 domains to perform 32 HTTP transactions. The main domain is thegoo.se.

Submitted URL: https://thegoo.se

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Personal academic blog with research posts and no forms, impersonation, malware, or threat-intelligence hits. Only minor redirect signal observed.

Safety Factors (5)
No credential or payment collection
No threat-intelligence IoC matches
No JavaScript malware patterns
No known malicious kit identified
Content is consistent with a personal academic blog
Domain age information unavailable

Details

Page Title

Charlotte Brooks

Scan Type

public

Domain Name Analysis

The domain name 'thegoo.se' uses the Swedish country-code top-level domain (.se) without a subdomain. Its registrable label 'thegoo' stretches across 6 characters containing 3 vowels alongside 3 consonants. Splitting it apart reveals two words: the, goo. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thegoo.se

Page Load Overview

3.04s
Total Load Time
11.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,842 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning47% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

education learning
47%
healthcare medical
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.200.22.214Richardson, Texas, United States
AS63949Akamai Connected Cloud
450.116.58.96Cedar Knolls, New Jersey, United States
AS63949Akamai Connected Cloud
4184.24.77.191Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4184.24.77.189Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
418.64.211.128Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
418.64.211.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
418.64.211.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
418.64.211.103Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
328--

Detected Technologies6

X-UA-Compatible
100%
MetaGenerator
100%
HTTP/3
40%
HSTS
40%
Caddy
40%
Hugov0.91.2
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F513947382E1322743D312F6AA923B5EAF92812BEA960C15F1DD41D4AF95FB34F13149

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ueL4XGMhcmUtLcef0XJr3YzH7MzQjQkBTXFtXF+Xht/X1j/UAHaKmF/Xib0X+/eS:34XGe6l30Z7y7MzQjQSXPXwXhtX1LuiZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42636:0WCHChVADlIaJQheMkKATdBFQkCIHaQWkoCBSrEYAISAwjDUIYEASYCEURkgpgkMAUhRKJCMwKLEDw2iIBSlOEsQOAVECIOh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffe7ffc3c3
Perceptual Hash:b0cf349b24cf9964
Difference Hash:080d0d299d198e96
Wavelet Hash:c6c3c3e7c3c3c1c1
Color Hash:#931f3c

Other Hashes

Crop Resistant:080d0d299d198e96,e010a01a1a7a6000,95aaaa152b74ccfc

Scan History

Scan history not available

Unable to load historical scan data