ScanMalware.com

Security Scan Report: winterconsulting.se

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0dceb9b3-0e2e-48d0-9f2a-8dc808970b86Domain and IP registration (RDAP)/api/v1/rdap/0dceb9b3-0e2e-48d0-9f2a-8dc808970b86How often this domain was scanned/api/v1/domain/stats/winterconsulting.seScan history for this domain/api/v1/domain/history/winterconsulting.se?limit=15
This website contacted 17 IPs in 2 countries across 12 domains to perform 95 HTTP transactions. The main domain is winterconsulting.se.

Submitted URL: https://winterconsulting.se

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Self-branded business site with no forms, no impersonation, and no threat-intel, malware, or IDS signals. Unknown .se domain age is a neutral factor only, so risk is low.

Safety Factors (5)
Self-branding detected — site presents its own brand, not another organisation's
Zero credential or payment forms on the page
No threat-intelligence, YARA, or network IDS hits
No obfuscated/malicious JavaScript behaviour detected
No cross-origin credential handling
Domain age information unavailable

Details

Page Title

Winter Consulting

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'winterconsulting.se' is registered with no subdomain. Its registrable label 'winterconsulting' stretches across 16 characters containing five vowels alongside eleven consonants. Word splitting yields two words: winter, consulting. Median word length comes out to 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://winterconsulting.se

Page Load Overview

5.73s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:100%
Script:Latin
Direction:ltr

Detection Details

Text Length:189 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
53%
documentation technical
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15194.9.94.85Sweden
AS39570Loopia AB
593.188.2.51Sweden
AS39570Loopia AB
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5162.159.138.60Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
5142.251.152.4Google · CDNUnited States
AS15169Google LLC
5142.251.157.4Google · CDNUnited States
AS15169Google LLC
5142.251.155.4Google · CDNUnited States
AS15169Google LLC
5142.251.154.4Google · CDNUnited States
AS15169Google LLC
5142.251.127.157Google · CDNUnited States
AS15169Google LLC
9517--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B01B16B184A4D4C4110A12098F2B0881D2FBE73725498D8B9D33C6FD5CE39898963BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hnMQEdOasxdG6Qclfh8XIPKLFnhsOAuqEKBp/24CwbnFq+hBYi1klWsLqWxTyJKq:hMns/GsppexmOM3xGWEyKHOF9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:806:AAAAAAAAAgAAAAAAQQAAAAAAAghAAAAAAQAAAAAAACQgAAIQEAACAAAAAACAAAAgAIAAAAAAAIAAAAAAAAAAAAAAAIAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:18187c7e39383014
Perceptual Hash:ccd83d0d96e2f06c
Difference Hash:f2b395c5f1d3e664
Wavelet Hash:18187c7f7b3920bc
Color Hash:#78653a

Other Hashes

Crop Resistant:c6c6e2e0f87e3e3c,b3b3b0b5b4b4b4b3,e1f4c66fbccfe333,e2192c8ecec6ffd9,9d3e3e3f3e9e9e9c,f2b294c5f1d2e624

Scan History

Scan history not available

Unable to load historical scan data