ScanMalware.com

Security Scan Report: arebilverkstad.nu

Redirected to:
https://www.berners.se/
Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Redirect from arebilverkstad.nu lands on the genuine Berners dealership site (berners.se). No credential/payment forms, no Indicators of Compromise, no malware or IDS hits — legitimate business page.

Safety Factors (4)
Final destination is the dealership's own established brand domain (berners.se) — self-branding, not impersonation
No credential-harvesting or payment forms; only an opt-in newsletter email form with an explicit consent checkbox and privacy policy link
No threat-intelligence matches, no malware patterns, no IDS alerts, no obfuscated or exfiltrating JavaScript
Real business indicators: physical/faktura address, company history since 1925, legal/privacy pages, inventory and service content
Domain age information unavailable

Details

Page Title

Berners

Scan Type

public

Domain Name Analysis

The domain name 'arebilverkstad.nu' uses the .nu country-code top-level domain and has no subdomain. The second-level label 'arebilverkstad' is 14 characters long split between 5 vowels and 9 consonants. Breaking it apart gives five words: are, bil, ver, k, stad. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://arebilverkstad.nu

Page Load Overview

9.41s
Total Load Time
28.6 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:5,659 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software82% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
82%
documentation technical
81%
government public service
79%
blog personal website
68%
education learning
63%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1676.76.21.22Aws · CLOUDWalnut, California, United States
AS16509Amazon.com, Inc.
15194.9.94.86Sweden
AS39570Loopia AB
15104.18.42.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15192.178.183.207Google · CDNUnited States
AS15169Google LLC
15188.166.202.229Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
1534.160.100.220Google · CDNKansas City, Missouri, United States
AS396982Google LLC
15172.64.145.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1566.33.60.129Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
15142.251.14.207Google · CDNUnited States
AS15169Google LLC
15142.250.154.207Google · CDNUnited States
AS15169Google LLC
18112--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T196143BF2A3D06EB5D727D7C9F563AB1C305A213E9F534AC4E2A89BA0D7D4C89CD05884

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:JORqANoj2FPzFblb9Jt6qlvjUF0jFfjhmrhOKgMfK7PLtp:JQlPp1m0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:209148:RBmAAZVQUsQcmEgqBC2mjCaEAw0GEQTiqzYGROMkJSRRCcB0sEEYcAEOoNAJCGJwIIEgDA2HC4xyQGOy4aCMeQKcUCgTTF0N

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c1c1c3ce0f7
Perceptual Hash:9a0e65713ce29ae3
Difference Hash:92717979f9799887
Wavelet Hash:00083c3c3c7cfcff
Color Hash:#78773a

Other Hashes

Crop Resistant:62eaec6266662634,92717979f9799887

Scan History

Scan history not available

Unable to load historical scan data