Security Scan Report: hedinbil.nu

Redirected to:
https://hedinautomotive.se/
Site favicon
Submitted: Sep 26, 2026, 10:10:24 PMCompleted: Sep 26, 2026, 10:11:23 PMpubliccompleted

This website contacted 11 IPs in 3 countries across 12 domains to perform 108 HTTP transactions. The main domain is hedinautomotive.se and was registered 5 years ago.

Submitted URL: https://hedinbil.nu

Effective URL:

https://hedinautomotive.se/
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

hedinbil.nu redirects to the official Hedin Automotive dealership site, matching its own brand. No forms, no threat-intel hits, no malicious JS — a routine domain rebrand.

Safety Factors (4)
Cross-domain redirect resolves to the brand owner's own site (rebrand, not phishing)
Zero credential or payment collection on the page
No threat-intelligence or network IDS hits
Normal third-party infrastructure (Sitecore, Usercentrics CMP, Google Tag Manager, Datadog)
Domain age information unavailable

Details

Page Title

Ny eller begagnad bil, service & verkstad | Hedin Automotive

Scan Type

public

Domain Name Analysis

The domain 'hedinbil.nu' uses the .nu country-code top-level domain. The core label 'hedinbil' covers 8 characters with three vowels and 5 consonants. It segments into 2 words: hedin, bil. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hedinbil.nu

Page Load Overview

4.98s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:4,820 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business52% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
52%
finance banking
41%
documentation technical
37%
corporate
35%
government public service
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1857.153.35.252Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
9193.15.224.50Stockholm, Stockholm County, Sweden
AS1257Tele2 SWIPnet
9104.18.42.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.250.154.97Google · CDNUnited States
AS15169Google LLC
934.149.254.14Google · CDNKansas City, Missouri, United States
AS396982Google LLC
934.102.170.124Google · CDNKansas City, Missouri, United States
AS396982Google LLC
935.190.14.188Google · CDNKansas City, Missouri, United States
AS396982Google LLC
934.95.108.180Google · CDNKansas City, Missouri, United States
AS396982Google LLC
935.201.111.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9172.64.145.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10811--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F243976551418FA927B06F07192AB4EF28B6508E6C22C8DF1D3C5851ACF85CA9337EF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:3K2bIdrErh0OBSDKlfRuoVqaaM/HwqN6fB7OwUYHN:G1fOwUM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:226110:DuCKqFAA3jhRGp0og4HEROCukShgHBwBBAKgCSHwKBIASBDAAatAQQCQEMJMSqCQgK0EJHDbC1zMBVHhEKRwsjRgUJYDiQHI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f800183c3c3cffff
Perceptual Hash:ca4974f299b9a466
Difference Hash:91c57371e1e91f29
Wavelet Hash:e000183c383cffff
Color Hash:#bfd279

Scan History

Scan history not available

Unable to load historical scan data