Security Scan Report: normskifte.se

Redirected to:
https://scienceparkboras.se/2023/12/normskifte-tankesmedjan-for-cirkul...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 6 domains to perform 88 HTTP transactions. The main domain is normskifte.se.

Submitted URL: https://normskifte.se

Effective URL:
https://scienceparkboras.se/2023/12/normskifte-tankesmedjan-for-cirkul...
Redirected

AI Security Verdict

Low Risk

Confidence: 80%

2
Risk Score

Low-risk article redirecting from normskifte.se to Science Park Borås. No credential or payment forms, no threat-intel, YARA or IDS hits; content matches a legitimate institutional think-tank page.

Safety Factors (4)
Article-type content with no credential or payment collection fields.
No Indicators of Compromise, YARA malware matches, malicious kit roster entries, IDS alerts or cross-origin credential exfiltration detected.
The final page presents organizational information from Science Park Borås / Högskolan i Borås, not an impersonation of another entity.
No anti-analysis JavaScript behavior or hidden password/payment fields observed.
Domain age information unavailable

Details

Page Title

Normskifte - tankesmedjan för cirkulära samhällen - Science Park Borås

Scan Type

public

Domain Name Analysis

Domain 'normskifte.se' uses the Swedish country-code top-level domain (.se) without a subdomain. The second-level label 'normskifte' is 10 characters long split between 3 vowels and 7 consonants. It segments into 4 words: norms, k, if, te. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://normskifte.se

Page Load Overview

18.33s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:7,588 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog100% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
100%
corporate
70%

Detected Features

Search
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
893.188.2.51Sweden
AS39570Loopia AB
8194.9.94.86Sweden
AS39570Loopia AB
8142.251.157.119Google · CDNUnited States
AS15169Google LLC
8142.251.14.95Google · CDNUnited States
AS15169Google LLC
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8142.251.151.119Google · CDNUnited States
AS15169Google LLC
8142.251.13.95Google · CDNUnited States
AS15169Google LLC
8142.251.13.94Google · CDNUnited States
AS15169Google LLC
8142.251.150.119Google · CDNUnited States
AS15169Google LLC
8142.251.154.119Google · CDNUnited States
AS15169Google LLC
8811--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1841418B3D298143F23DB439C9841FB0966AB924ACA081B24F6FEA45C97CC9D3557371B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HsCeMbd24UJBvWAzHY7tg2Zg0GNMnrXFY8NvjWTxIAWk51KBjcyXYrwO:Hsrv6ncrwO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:192090:YEVzgAAArCV4YEhho3jIGaAVAfwYEIAsAYABFCQm6MZQVQVJAEkWQUDhxB6BIgKFKLxMwoRUSwBCAAACAERL4AjCwokwgBEE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffc7c7
Perceptual Hash:b24934b9cf34cbc1
Difference Hash:2fd9d187010f0f0f
Wavelet Hash:00003000ffffcfff
Color Hash:#6640bf

Scan History

Scan history not available

Unable to load historical scan data