Security Scan Report: koll.nu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 3 countries across 12 domains to perform 39 HTTP transactions. The main domain is koll.nu.

Submitted URL: https://koll.nu

AI Security Verdict

Safe Website

Confidence: 72%

1
Risk Score

Swedish loan-comparison site operating under its own 'Koll' brand on koll.nu. Only a loan-application questionnaire (no password or payment fields), normal analytics/CMS scripts, and no threat-intel, hunting rule or IDS hits. Standard credit disclosures present.

Safety Factors (6)
Own-brand site; domain matches the displayed brand 'Koll'
No password, disguised-password or payment fields; no credential harvesting shape
No Indicators of Compromise, hunting-rule match, Safe Browsing hit or IDS phishing/malware alert
Transparent loan-broker business model with published contact number and named partner banks
Required consumer-credit risk disclosure and representative calculation present
No cross-origin credential exfiltration; third-party scripts are mainstream analytics/CMS services
Domain age information unavailable

Details

Page Title

Har du koll? - samla dina lån och krediter!

Scan Type

public

Domain Name Analysis

The domain 'koll.nu' uses the .nu country-code top-level domain without a subdomain. The second-level label 'koll' is 4 characters long holding one vowel versus 3 consonants. Tokenizing the label suggests one word: koll. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Ring oss så hjälper vi dig! . Q 010 10 11 800 Logga in Samla dina lan & krediter idag Samla eller hitta ett nytt lan har: Lanebelopp 75 000 kr Aterbetalning 10. ar Samla alla lan Jag har medsékande...

Page Load Overview

7.52s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:6,982 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20172.67.153.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.97Google · CDNUnited States
AS15169Google LLC
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1150.171.109.99Azure · CLOUDUnited States
AS8075Microsoft Corporation
132.200.5.35Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1216.239.34.36Google · CDNUnited States
AS15169Google LLC
165.8.131.66Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3920--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T198731A229550342F526B82D99191972D62EFE30FE8471C58F2EC87580FDAFD8E82B2D5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Xk1s88Ov6S5Fda2mF61aiKmm+OpRbh6PfXvI7I3NAnJYwuUTENXiawilxS4vQvAA:XB882bda2mF61aj7dOwufqK0f

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80253:INTBSCQRAQWmfAxASQaUBEgCQaIJIVSbyQYAWCBChMACBZkBgCbJCEmiKHBBgDQBhA5Kgiw5oAGowhBtIgIqDPkYoJIcqgGc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:a78f9f9fd1ffcf00
Perceptual Hash:bc9f32e6679203e0
Difference Hash:2e363a3223669e9d
Wavelet Hash:a68a8b8fd1ffc300
Color Hash:N/A

Other Hashes

Crop Resistant:2e363a3223669e9d

Scan History

Scan history not available

Unable to load historical scan data