ScanMalware.com

Security Scan Report: r.nl.framfot.se

Redirected to: https://www.linkedin.com/authwall?trk=gf&trkInfo=AQHiEM0sNMDc0wAAAZm929XIvVUguMqCiSxs1g9xikVcxAqE5RYfexO4cX9fjTy7k3UtEz3Zsis8B8XXnEYj1FM-bGTFQ9_pFAD5yh-CQFzd5Brr9VU37C4u-lGj0BsDFSOR4bI=&original_referer=https://r.nl.framfot.se/&sessionRedirect=https%3A%2F%2Fse.linkedin.com%2Fschool%2Fframfot%2F

Site favicon
Submitted: Oct 7, 2025, 8:48:34 AMCompleted: Oct 7, 2025, 8:49:10 AMpubliccompleted
Loading additional data...

Summary

This website contacted 30 IPs in 3 countries across 13 domains to perform 67 HTTP transactions. The main domain is linkedin.com.

Submitted URL: https://r.nl.framfot.se/mk/cl/f/sh/WCPzyXJTZ7viMBKLXaq3hCytQPa0OSiQ/bimC7_KoV-eq

Effective URL: https://www.linkedin.com/authwall?trk=gf&trkInfo=AQHiEM0sNMDc0wAAAZm929XIvVUguMqCiSxs1g9xikVcxAqE5RYfexO4cX9fjTy7k3UtEz3Zsis8B8XXnEYj1FM-bGTFQ9_pFAD5yh-CQFzd5Brr9VU37C4u-lGj0BsDFSOR4bI=&original_referer=https://r.nl.framfot.se/&sessionRedirect=https%3A%2F%2Fse.linkedin.com%2Fschool%2Fframfot%2FRedirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Phishing site impersonating LinkedIn; high risk to users

Risk Factors
Impersonates LinkedIn brand on an unranked, likely new domain
Collects user credentials (email/phone and password) via form
Domain age unknown, suggesting recent registration
Redirects to legitimate LinkedIn URL after submission, a common phishing tactic
Domain age information unavailable

Details

Page Title

Sign Up | LinkedIn

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(58%)

Domain Information

The domain name 'r.nl.framfot.se' uses the Swedish country-code top-level domain (.se), featuring subdomain 'r.nl'. Its registrable label 'framfot' stretches across 7 characters containing two vowels alongside five consonants. Word splitting yields three words: f, ram, fot. Average segment length settles at 3 characters. 'f' most strongly signals Catalan. You may catch it in Norwegian and Swedish as well.

Screenshot

Security scan screenshot of https://r.nl.framfot.se/mk/cl/f/sh/WCPzyXJTZ7viMBKLXaq3hCytQPa0OSiQ/bimC7_KoV-eq

Page Load Overview

10.66s
Total Load Time
67
HTTP Requests
13
Domains
99 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,052 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
58%
technology software
56%
documentation technical
32%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9104.18.33.206United States
AS13335CLOUDFLARENET
2172.64.154.50United States
AS13335CLOUDFLARENET
2141.101.90.106United States
AS13335CLOUDFLARENET
21.179.112.197France
AS396982GOOGLE-CLOUD-PLATFORM
2104.18.41.41United States
AS13335CLOUDFLARENET
234.120.250.63Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
240.90.65.144United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
240.90.65.96United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
234.36.73.246Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
2172.64.146.215United States
AS13335CLOUDFLARENET
6730--

Detected Technologies2

PasswordField
100%
Open-Graph-Protocolvwebsite
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BB73D790A1F02E77010B86F9B4A1FA11E9D9C14BE65EACC6B9AC47582FD7C721D0F24D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:eZA9OAu68w8pyLM5QxH8EDr/VlT/5DJVECW:eZA4Au68w8AdxH8EDr/bNDJVVW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80383:gBKRQhIBPgShBghAE+IHMnrMYn2pCAAoA1hDtjAgAoUCSofIHNAhBgWAgCAAQGgUA20dMriAKcElggQkIlhAQA0QgC9AD+X0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffe7e7ff
Perceptual Hash:f30d4a234876bcdc
Difference Hash:c9c8004c104c4d01
Wavelet Hash:0000feeee6e6e4e4
Color Hash:#9ed22d

Other Hashes

Crop Resistant:c9c8004c104c4d01,c0caf4e9e8e4d3d4

Scan History

Scan history not available

Unable to load historical scan data