Security Scan Report: wasa.nu

Redirected to:
https://www.lffinans.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 7 domains to perform 85 HTTP transactions. The main domain is wasa.nu.

Submitted URL: https://wasa.nu

Effective URL:
https://www.lffinans.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

1
Risk Score

Swedish LF Finans financing page served after an ordinary cross-domain redirect; no credential/payment form, no Indicators of Compromise, YARA or IDS hits. Clean.

Safety Factors (5)
Cross-domain redirect ends on the claimed brand's own registrable domain (wasa.nu -> lffinans.se), consistent with an ordinary domain move/acquisition, not impersonation
No credential, password or payment form anywhere in the captured DOM (verified counts all zero)
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
Page content (loans, customer service, cookie policy, Elmia event news) is consistent, well-formed corporate finance content
Third-party script hosts are popular, ranked services (Cookiebot, Google Tag Manager, Episerver)
Domain age information unavailable

Details

Page Title

Lån och finansiering för privatpersoner och företagare | LF Finans

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'wasa.nu' is registered. Its registrable label 'wasa' stretches across 4 characters split between two vowels and two consonants. Segmentation suggests two words: was, a. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wasa.nu

Page Load Overview

4.10s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:12,956 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: dynamic
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13185.195.93.176Sweden
AS42649Baffin Bay Networks AB
9194.9.94.85Sweden
AS39570Loopia AB
9185.195.93.57Sweden
AS42649Baffin Bay Networks AB
9104.18.36.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.13.97Google · CDNUnited States
AS15169Google LLC
923.36.162.212Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
923.212.205.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
923.36.162.221Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
923.36.162.209Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
859--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4D3C831B0E1612F0753D6F896A4D74B9DC24187DA862484F1AE87692FD2D03ACBF17B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:oZ/ehLCPKstNv0hvGv6bPX5PnQwN/M/9ImbC/l8NOHD:okCQPXZnX/M/q6yD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:139078:KAAFksgGGWWAz6AiMIqGIEDFYRDoVBQV0M9J2EACACFRZSCVFgKMoEmPYSJrBAkjjKRQsIBIdDQICCSxDXDKABcRRXCUDQGg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c7cffffff
Perceptual Hash:8a02edfd431aa8bd
Difference Hash:23d4e1f9c82e3627
Wavelet Hash:00003c3c3cffc3ff
Color Hash:#ac539c

Scan History

Scan history not available

Unable to load historical scan data