Security Scan Report: koibutiken.se

Redirected to:
https://www.koibutiken.se/
Site favicon
Submitted: Oct 13, 2026, 1:10:38 PMCompleted: Oct 13, 2026, 1:11:59 PMpubliccompleted

This website contacted 24 IPs in 3 countries across 16 domains to perform 95 HTTP transactions. The main domain is koibutiken.se and was registered 21 years ago.

Submitted URL: https://koibutiken.se

Effective URL:

https://www.koibutiken.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Aged Swedish koi-shop domain whose pages are stuffed with injected multilingual casino/betting spam and a closed-shop notice — likely compromised and repurposed for SEO spam. No credential phishing or malware observed.

Risk Factors (3)
Injected SEO spam content promoting casinos and betting in numerous languages unrelated to a koi pond shop
Indication that the site is compromised, hijacked or resold for gambling affiliate spam
Shop advertised as closed with an offer to transfer the webshop, a common state before domain abuse
Safety Factors (5)
Domain is 12 years old (registered 2013-11-12) with a physical address visible
Self-branding: title/meta tags match the domain (koibutiken), no impersonation of another entity
Newsletter form posts to Sendinblue/Brevo, a legitimate form backend service
No Indicators of Compromise, no JavaScript malware, no IDS alerts, no Safe Browsing hit
The site's own login form (credentials submit to its own domain; 4718 days old) with no strong malicious indicators — a first-party sign-in is normal; risk clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Japanska Koi & Dammtillbehör - Skapa Din Drömdamm | Koibutiken

Scan Type

public

Domain Name Analysis

The domain name 'koibutiken.se' uses the Swedish country-code top-level domain (.se) with no subdomain. The second-level label 'koibutiken' is 10 characters long containing 5 vowels alongside 5 consonants. It segments into four words: koi, but, i, ken. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://koibutiken.se

Page Load Overview

13.59s
Total Load Time
11.6 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:218,233 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
documentation technical
27%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26212.16.187.108Sweden
AS61207Hostek AB
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3104.16.249.109Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.156.119Google · CDNUnited States
AS15169Google LLC
3185.111.111.158Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.127.148Google · CDNUnited States
AS15169Google LLC
9524--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T151A44B73D0F12236528753E4B150FF9EBADAD21CCBA30D65A4DCC6665BC6CB0513A28E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:syI10cylmztJh04l8r37ByVLsEJxtsy5LeVMtZORPl2L59KGi61X:/qtJerrBqVWyNeVMtZORPlR2X

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:477038:AJFVTEk+ARBqkEACGFCDAD1xsQVGIAiikgADjDIUShcHBDQwSAMAKFqkQIRYqBgwOCDiUNEYgABgO5iDeAJg1CARlDAhQED6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:83d3efffffe3e3e3
Perceptual Hash:e19c65659c63269b
Difference Hash:2f230f09a04f4f4e
Wavelet Hash:8181c7cfffc1c1c1
Color Hash:#5cac53

Scan History

Scan history not available

Unable to load historical scan data