Security Scan Report: ohsabanan.se

Redirected to:
https://www.ohsabanan.se/?lang=en
Site favicon
Submitted: Sep 26, 2026, 11:00:13 PMCompleted: Sep 26, 2026, 11:01:15 PMpubliccompleted

This website contacted 34 IPs in 1 country across 21 domains to perform 256 HTTP transactions. The main domain is ohsabanan.se and was registered 13 years ago.

Submitted URL: https://ohsabanan.se

Effective URL:

https://www.ohsabanan.se/?lang=en
Redirected

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Established 8-year-old Swedish museum railway site self-branding as Ohsabanan, with no forms, no malware, and no impersonation. The lone intel hit is a generic abuse tag on a shared third-party Wix IP — not content evidence.

Safety Factors (5)
Established domain registered 2018 (well-established, minimal risk category)
Site displays its own brand (SELF-BRANDING DETECTED) matching the domain
No credential, login, or payment forms present
No malware, obfuscated malicious JS, phishing kit, or IDS/Safe Browsing hits
Some legal information present (privacy policy)
Domain age information unavailable

Details

Page Title

Home | Ohsabanan

Scan Type

public

Domain Name Analysis

You're looking at domain 'ohsabanan.se' on the Swedish country-code top-level domain (.se) while skipping any subdomain. Count 9 characters in 'ohsabanan' holding four vowels versus 5 consonants. Breaking it apart gives three words: oh, sabana, n. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ohsabanan.se

Page Load Overview

25.76s
Total Load Time
14.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,020 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25172.66.3.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7185.230.63.107Ashburn, Virginia, United States
AS58182Wix.com Ltd.
7172.67.152.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
765.8.131.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7151.101.2.217Fastly · CDNUnited States
AS54113Fastly, Inc.
734.49.229.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
754.67.37.168Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
752.86.151.249Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
734.149.206.255Google · CDNKansas City, Missouri, United States
AS396982Google LLC
25634--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7156C6026446C3D8ACF129DBA53BE0D21E4181BD9C5426FF9DD6D6C2BE39EC1287327

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:fdzLvhuqGX8xbEiuTi8U+IV6EeQTQjcEe3daQgkKZW6A6nhC26/WXAtQ1Z:fdBE8xbhuegFEeQTQMR6z7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:947566:CGAUFIFZYGSWRlUKQulBVGodBT4QeleCMQZmhIBKIlBAFO2QAUgAAgJUJrYxCQJCAJI7QOCgCJCASioCkUDgLJ+iHIRQgqiU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff998181818199ff
Perceptual Hash:a84ad668f668f64c
Difference Hash:952333032b3333cc
Wavelet Hash:fdbb0101818199ff
Color Hash:#40b5bf

Scan History

Scan history not available

Unable to load historical scan data