Security Scan Report: avdnora.se

Redirected to:
https://www.bad-varme.se/ort/nora/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 39 IPs in 5 countries across 22 domains to perform 304 HTTP transactions. The main domain is avdnora.se.

Submitted URL: https://avdnora.se

Effective URL:
https://www.bad-varme.se/ort/nora/
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Genuine Swedish VVS/plumbing contractor site that moved from avdnora.se to bad-varme.se. Only contact/quote forms, no credential or payment collection, and no threat-intelligence, YARA or kit evidence.

Safety Factors (5)
Contact/quote forms only — no password, payment or card fields
Self-branded site matching its own names (Bad & Värme / AVD Värme & Vatten)
No Indicators of Compromise, YARA, kit-roster or Safe Browsing findings
GDPR consent language and Cookiebot consent management present
Third-party scripts served from well-known, high-ranked providers
Domain age information unavailable

Details

Page Title

Rörmokare | VVS | Badrum | Värmepump | AVD Vatten & Värme i Nora

Scan Type

public

Domain Name Analysis

The domain name 'avdnora.se' uses the Swedish country-code top-level domain (.se) and has no subdomain. The core label 'avdnora' covers 7 characters containing 3 vowels alongside 4 consonants. Word splitting yields three words: a, vd, nora. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://avdnora.se

Page Load Overview

18.15s
Total Load Time
18.1 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:30,864 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%
corporate
70%

Detected Features

Search
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3846.16.234.100Sweden
AS44136ODERLAND Webbhotell AB
7104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
752.222.236.3Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7172.66.168.139Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.155.119Google · CDNUnited States
AS15169Google LLC
7216.239.36.181Google · CDNUnited States
AS15169Google LLC
734.32.156.188Google · CDNGroningen, Groningen, Netherlands
AS396982Google LLC
7185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
7150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
7142.250.154.97Google · CDNUnited States
AS15169Google LLC
30439--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A7A41A727952702F021F86DBA14BA72D62D382CDCA8224D1F4FC43B89BF1DE176B6156

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:6f6zRDmX2Lx+1IfM56LdivhLqzCveBY+vM+JkthHnygzyByfM56LdivhLqzl+j29:fK7x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:485560:gYbGEAAAAIEABn1ISohCTpn0OgkD0jEACgEmJBVUYBAU6CCGEOBNBIkMUi5QA8pEUGMRSERCJgAMhSECQAmCAAz6kJQQhZ4y

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003d3cffffffff
Perceptual Hash:cb4f3468161a9b97
Difference Hash:066361796923131c
Wavelet Hash:00003c3c3df9cbff
Color Hash:#c3c587

Scan History

Scan history not available

Unable to load historical scan data