Security Scan Report: ucrab.se

Redirected to:
https://www.ucrab.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 5 countries across 9 domains to perform 157 HTTP transactions. The main domain is ucrab.se.

Submitted URL: https://ucrab.se

Effective URL:
https://www.ucrab.se/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Legitimate Swedish training firm whose page carries obfuscated injected scripts hiding campaigntracker.* hosts flagged as 'iclickfix' malware; no forms or phishing, but the site appears compromised.

Risk Factors (4)
Hidden threat-feed hostnames (campaigntracker.icu/.run/.top, 'iclickfix' malware) concealed inside an obfuscated script
Unranked external script host js-static.cfd executed by the page
DNS query to .cfd TLD flagged by IDS (MEDIUM)
Site appears compromised to serve injected obfuscated JavaScript
Domain age information unavailable

Details

Page Title

Start - Utbildningscentrum i Rundvik

Scan Type

public

Domain Name Analysis

The domain name 'ucrab.se' uses the Swedish country-code top-level domain (.se). The second-level label 'ucrab' is 5 characters long with 2 vowels and three consonants. Tokenizing the label suggests two words: u, crab. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ucrab.se

Page Load Overview

6.88s
Total Load Time
16.0 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:1,508 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2446.30.213.8Copenhagen, Capital Region, Denmark
AS51468One.com A/S
19142.251.127.95Google · CDNUnited States
AS15169Google LLC
1983.140.23.47Sweden
AS12552GlobalConnect AB
19185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
19157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
19142.251.127.84Google · CDNUnited States
AS15169Google LLC
192.23.246.146Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
19142.250.154.94Google · CDNUnited States
AS15169Google LLC
1578--

Detected Technologies14

WordPressv6.8.10
100%
JQueryv3.7.1
100%
Bootstrapv7e2118170854feb483e5
50%
PHPv8.0.30
40%
Elementorv3.31.3
40%
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13874A4907E535439717F468FA1CBE22C202CC8D7D52E5AEAF06D521793FAFA533A0606

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:h1AnAlt2QAeOH09uG/Np5eapGbIDkFPleFXKd+FbDyb5fb61bShbmLbTIbheb1Iy:h1/xp3EN6S4EIFmXI45mj0Zi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:356139:wJgnEAwQUAD6J4iQ0ACaoTiI2YQRHkgUhBAAyJw9AZAk0QNK1kApkxCdCEEBEBEt5INEEJTERAA0TQAgMGEA4gSRIaEBMwNx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f0f1f1e1e10300
Perceptual Hash:e2d51d271c38633b
Difference Hash:86c2898503cb2737
Wavelet Hash:00f8f9ffe1e30311
Color Hash:#d22d9b

Scan History

Scan history not available

Unable to load historical scan data