Security Scan Report: floorflow.se

Redirected to:
https://floorflow.se/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 1 domain to perform 21 HTTP transactions. The main domain is floorflow.se and was registered 4 weeks ago.

Submitted URL: https://floorflow.se

Effective URL:
https://floorflow.se/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Appears to be a legitimate new internal tool for a flooring company (self-branded, email-only login, no credential/payment fields, no threat hits). Only concern is the 0-day-old, unranked domain.

Risk Factors (1)
Domain newly registered (0 days old) and not present in Cisco Umbrella top 1M
Safety Factors (5)
Site displays its own brand matching its domain (no impersonation of another entity)
No password, disguised-password, or payment fields captured
No Indicators of Compromise, YARA malware patterns, IDS alerts, or malicious JavaScript behavior
No cross-origin form submission or credential exfiltration
Content reads as a genuine niche internal tool with authentic detail
Domain age information unavailable

Details

Page Title

Floorflow

Scan Type

public

Domain Name Analysis

Domain 'floorflow.se' uses the Swedish country-code top-level domain (.se). Count 9 characters in 'floorflow' split between three vowels and 6 consonants. Tokenizing the label suggests 2 words: floor, flow. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://floorflow.se

Page Load Overview

1.35s
Total Load Time
254 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:253 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property53% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
53%
technology software
46%
documentation technical
31%
government public service
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7216.198.79.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
764.29.17.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
213--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T123510053DC15DE4F1823ADDCD626732D8453DD2EEC3AAC48A2DC468852E2FE54B82961

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:w1sGwQa/WGhlpW8qalE4l10keBonvSk8h0wrFWiKAhV01g:w1sTZukfjdpnvLIsi7V0g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2554:IBEAQgEQAAAIABAEAAACARAFJAREAAIAEAQAAAQAIAAAASEDKSGAAggAIAQCAABABAAgBQEAAAEiAIQCIAAAEAAACAAAgCAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b3a6cc3833996666
Difference Hash:001008484c0c0000
Wavelet Hash:0f0f0707e0e0fcfc
Color Hash:#79d2b2

Other Hashes

Crop Resistant:001008484c0c0000

Scan History

Scan history not available

Unable to load historical scan data