Security Scan Report: icedover.nu

Site favicon
Submitted: Sep 26, 2026, 11:20:08 AMCompleted: Sep 26, 2026, 11:21:09 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

New self-branded Swedish blog with no credential/payment forms or threat-intel hits. Unranked, ≤1-day-old domain and eval calls warrant caution, but no concrete phishing or malware evidence.

Risk Factors (4)
Newly registered domain (≤1 day old)
Domain unranked in Cisco Umbrella top 1M
Multiple eval() JavaScript calls (dynamic code execution)
Gambling/betting-related articles on a generic new blog, suggesting possible SEO spam
Safety Factors (4)
Self-branding detected: site's own brand matches its domain
No credential/payment forms; only a search form
No Indicators of Compromise, YARA malware, IDS alerts, or Safe Browsing matches
External resources are Google Analytics/AdSense, Google Fonts, and Gravatar, not suspicious
Domain age information unavailable

Details

Page Title

Icedover.nu - Europe

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'icedover.nu' is registered with no subdomain. The core label 'icedover' covers 8 characters holding four vowels versus 4 consonants. Splitting it apart reveals 2 words: iced, over. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://icedover.nu

Page Load Overview

7.70s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:7,859 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical56% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
56%
adult content
48%
education learning
47%
blog personal website
46%
technology software
42%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5185.76.64.174Sweden
AS200719Miss Hosting AB
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.251.20.155Google · CDNUnited States
AS15169Google LLC
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
5192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5142.251.13.156Google · CDNUnited States
AS15169Google LLC
5142.251.14.132Google · CDNUnited States
AS15169Google LLC
5142.251.13.95Google · CDNUnited States
AS15169Google LLC
5142.251.13.97Google · CDNUnited States
AS15169Google LLC
7515--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15DD385E2A46B1DE9175387E9A882BC547AE4E013C3C01684F5BD51286BCD686FCD339F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:M1m13TOJkHS1tJr44FgGH5g+zLVxU13wkCsOuaHGeHZVowGN9FBH3xAq1QgKdP/Z:T2Z/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:138401:0iUIsyFgXpIgCmeApaimGQAgQMRAcQSioqYQAjQUgIyCnFAOHsgEHZQTwHMhbNDESYAyIMGQCKVDEGxFQY0gQATPBGtDTRsA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00c387c7c7ffffff
Perceptual Hash:b839cf4732134e4d
Difference Hash:3c233f1d9d350c25
Wavelet Hash:00818787c7c7c7f7
Color Hash:#539fac

Scan History

Scan history not available

Unable to load historical scan data