Security Scan Report: rmgruppen.nu

Redirected to:
https://rmgruppen.se/
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 4 countries across 11 domains to perform 104 HTTP transactions. The main domain is rmgruppen.nu.

Submitted URL: https://rmgruppen.nu

Effective URL:
https://rmgruppen.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

1
Risk Score

Self-branded Swedish construction group site (RM Gruppen) with real contact details and no forms, impersonation or threat-intel hits. Redirect from .nu to .se is an ordinary domain move; low risk.

Safety Factors (6)
Self-branding consistent with the domain (no impersonation of another entity)
Real corporate contact details on page: [email protected], 08-410 510 68, Kuskvägen 8, 191 62 Sollentuna
Detailed legitimate business content (four subsidiary companies, award mention, charity partnership)
No credential or payment forms present
No threat-intelligence, YARA, IDS or JavaScript behavioral signals
Cross-origin traffic limited to common legitimate services (Google, Vimeo, Google Fonts)
Domain age information unavailable

Details

Page Title

Hem - RM Gruppen

Scan Type

public

Domain Name Analysis

You're looking at domain 'rmgruppen.nu' on the .nu country-code top-level domain while skipping any subdomain. The core label 'rmgruppen' covers 9 characters with two vowels and 7 consonants. Tokenizing the label suggests three words: rm, gruppe, n. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rmgruppen.nu

Page Load Overview

7.45s
Total Load Time
7.6 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:3,765 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business72% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
72%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1435.228.217.9Google · CDNLappeenranta, South Karelia Region, Finland
AS396982Google LLC
593.188.2.54Sweden
AS39570Loopia AB
5172.217.208.95Google · CDNUnited States
AS15169Google LLC
5162.159.138.60Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
554.75.207.84Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.154.119Google · CDNUnited States
AS15169Google LLC
599.80.139.86Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
53.5.69.21Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
53.5.71.125Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
10419--

Detected Technologies7

WordPressv7.1.2
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180B3F773E1341136A26B03ED70A5A764A1E5C31ECB428BF4B1FCD35A9BD6CA2157326C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:aTWe2KA1S8zdnb5B1ejMEC825ansEiCdE4hEX5p17N/U1iSNu3oHlv/I:Fnb5B1ejMEC825ansEiCdEkEV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:107470:qkAAIIICaEAfREmIgSQEoI/cKSzAQQIFDgYWEi9AtwpIZoQHga0YTBwJxRlRCHgABOEGEDJRKFRBALAkJdCAIIiwWAPJIGAe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdfde7f5c0c08101
Perceptual Hash:ead20f58e01731f9
Difference Hash:49c94d8d81156363
Wavelet Hash:fdfde7f1c0c08101
Color Hash:#7940bf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data