Security Report: www.malmqvist.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d13fdb59-299a-433d-b4ff-e746844f2d9d Domain and IP registration (RDAP)/api/v1/rdap/d13fdb59-299a-433d-b4ff-e746844f2d9dHow often this domain was scanned/api/v1/domain/stats/malmqvist.org Scan history for this domain/api/v1/domain/history/malmqvist.org?limit=15

This website contacted 9 IPs in 3 countries across 7 domains to perform 67 HTTP transactions. The main domain is malmqvist.org and was registered 14 years ago.

Submitted URL: https://www.malmqvist.org/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Personal WordPress portfolio (self-branded, no forms) that loads ClearFake/EtherHiding malware from a flagged .top domain; CRITICAL IDS malware + 3-feed threat-intel corroborate compromise. Malware distribution — avoid.

Risk Factors (5)

Third-party resource voidravenstorm.top (.top) flagged as ClearFake malware by 3 threat-intel feeds and marked as a content threat

CRITICAL IDS malware alert: EtherHiding exfiltration

HIGH IDS alerts: hostile *.top DNS/HTTP traffic

Ethereum RPC endpoint (0xrpc.io) contacted, a hallmark of blockchain-hosted malicious script delivery

Multiple obfuscated-JS heuristic alerts (informational, corroborated here by IoC and IDS evidence)

Domain age information unavailable

Details

Page Title

RPMalm Invest – RPMalm Invest – Robert Malmqvist

Scan Type

public

Favicon Hash

MMH3: 1724210624

MD5: 30b4c60e0ae08d8ac6ba39dbfc1a24b9

Domain Name Analysis

You're looking at domain 'www.malmqvist.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'www'. The core label 'malmqvist' covers 9 characters containing two vowels alongside seven consonants. Splitting it apart reveals four words: mal, mqv, is, t. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.09s

Total Load Time

3.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:61%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE

Text Length:284 chars

Detector Agreement:100%

Language mismatch: Declared as sv-SE but detected as en

Website Classification

Primary Category

social media network94% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

94%

technology software

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	46.30.213.151	Copenhagen, Capital Region, Denmark	AS51468One.com A/S
7	142.251.127.95Google · CDN	United States	AS15169Google LLC
7	104.21.36.181Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	151.101.65.229Fastly · CDN	United States	AS54113Fastly, Inc.
7	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
7	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	151.101.193.229Fastly · CDN	United States	AS54113Fastly, Inc.
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
67	9	-	-