Security Scan Report: citrocasa.se

Redirected to:
https://friskpresset.dk/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 5 countries across 20 domains to perform 129 HTTP transactions. The main domain is citrocasa.se.

Submitted URL: https://citrocasa.se

Effective URL:
https://friskpresset.dk/
Redirected

AI Security Verdict

Safe Website

Confidence: 85%

1
Risk Score

Legitimate Danish juice-presser reseller. The Citrocasa brand is referenced as the product being sold, not impersonated. Only a standard contact form with business details; no threat-intel, YARA or IDS findings.

Safety Factors (5)
Full business contact details: Rørvangsvej 43A, 4300 Holbæk, Denmark, e-mail [email protected], CVR 32154093
No credential, login or payment fields on the page
No Indicators of Compromise, YARA, IDS or Safe Browsing findings
No obfuscated or malicious script behavior; third-party scripts are standard consent/analytics/font hosts
Content reads like a normal commercial reseller/service site with product, service and company information
Domain age information unavailable

Details

Page Title

Juicepressere fra Citrocasa i Holbæk | Stort udvalg af maskiner og tilbehør

Scan Type

public

Domain Name Analysis

The domain name 'citrocasa.se' uses the Swedish country-code top-level domain (.se) while skipping any subdomain. The core label 'citrocasa' covers 9 characters containing 4 vowels alongside five consonants. It segments into two words: citro, casa. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://citrocasa.se

Page Load Overview

1.72s
Total Load Time
9.3 MB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da-DK
Text Length:4,599 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical65% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
65%
adult content
43%
government public service
38%
blog personal website
31%
corporate business
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17193.8.37.10Sorø, Zealand, Denmark
AS3308Norlys Telco A/S
477.111.240.138Copenhagen, Capital Region, Denmark
AS51468One.com A/S
4185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
4185.152.64.17Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
4142.251.155.119Google · CDNUnited States
AS15169Google LLC
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
42.21.20.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4142.251.127.95Google · CDNUnited States
AS15169Google LLC
4142.251.157.120Google · CDNUnited States
AS15169Google LLC
12929--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A9409317B90202EA06386DCA65466CD5B2FD633F31509FCF66EE220C7C9AC9362755E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:yscbJm8BIEhCwS93fkbuOi55qjbXS1ihg:yscbJm8BIE0wSgjbpO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:409245:AA0hkDQmIJZAYHQ8aVjEmEAmheQYBg0iAm1WoBgwBA8B0Irh0AjEAA2kEKRNWdAQcyMRgMicQABeAiRpLEAsBcJAbLCQiAOB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data