ScanMalware.com

Security Scan Report: phhus.se

Site favicon
Submitted: Sep 27, 2026, 10:30:20 AMCompleted: Sep 27, 2026, 10:31:05 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Newly registered, self-branded Wix site for a Swedish house builder. No forms, no impersonation, no Indicators of Compromise or malware — only the very young domain and an ML label keep it at moderate risk.

Risk Factors (2)
Very newly registered domain (≤1 day old) with no reputation history
ML content classifier returned a phishing-scam label (84%), a supporting indicator in the absence of concrete phishing artifacts
Safety Factors (5)
No credential, login, or payment forms present anywhere on the page
No brand impersonation — the site displays its own 'PHHUS' brand matching its domain
No Indicators of Compromise or threat-intel matches against the page or its resources
No JavaScript malware patterns, no credential exfiltration, no cross-origin form submission
Content (Swedish house-building text: Nyproduktion, Kundanpassade hus, Leveransbeskrivning) reads like a genuine small-business site; eval/Function calls originate from Wix platform bundles
Domain age information unavailable

Details

Page Title

PHHUS

Scan Type

public

Domain Name Analysis

The domain 'phhus.se' uses the Swedish country-code top-level domain (.se) and has no subdomain. The core label 'phhus' covers 5 characters holding 1 vowel versus four consonants. Word splitting yields 2 words: ph, hus. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://phhus.se

Page Load Overview

6.67s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:100%
Script:Latin
Direction:ltr

Detection Details

Text Length:215 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam84% confidence
Type: static
Method: ml+structural

All Detected Categories

phishing scam
84%
technology software
58%
documentation technical
41%
blog personal website
35%
news media journalism
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14194.9.94.86Sweden
AS39570Loopia AB
9172.66.3.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9216.137.53.13Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9216.137.53.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
934.49.229.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9107.21.18.168Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
934.149.206.255Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9216.137.53.12Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9216.137.53.69Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9151.101.2.217Fastly · CDNUnited States
AS54113Fastly, Inc.
16718--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BE11EBA71C5E8C4D4410A0A46CF2B0CC1D6FAE76710598C4B5E3783F90CD3A88CA677C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hnMQEdOasxqtbG6Qclfh8XIPKLFnhsOAuqEKBp/24Cwbr6Qm2y+hBYi1klWsLqW4:hMnsk9GsppexmOM3x6QJQWB6QJX4HOF9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:870:AAAAAAAAAAIAAAAgAAACAAAAEAkAAACAAAAAAAAAiCAAAAAAAAAAAAAAAAAAQAAAAAAAAAhiAAAAAAAAABAEAAAAAAAAAAAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffbfb000000ffff
Perceptual Hash:cdcdf5521a922da1
Difference Hash:2c72f26971450837
Wavelet Hash:fffa1b000000ffdb
Color Hash:#8790c5

Other Hashes

Crop Resistant:2c72f26971450837,d696a5171894d7b6,d2d267cac7c79654,6a8a99cadb99cc4d,2731752e83506b1b,6869686971516960

Scan History

Scan history not available

Unable to load historical scan data