Security Scan: Näsums Byutveckling

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/65750a7e-d9ea-40ad-9881-bcd29bda8944 Domain and IP registration (RDAP)/api/v1/rdap/65750a7e-d9ea-40ad-9881-bcd29bda8944How often this domain was scanned/api/v1/domain/stats/nasum.se Scan history for this domain/api/v1/domain/history/nasum.se?limit=15

This website contacted 13 IPs in 2 countries across 12 domains to perform 136 HTTP transactions. The main domain is nasum.se and was registered 13 years ago.

Submitted URL: https://nasum.se

Effective URL:

https://www.nasum.se/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Established Swedish community site is compromised: analyst-vetted ClickFix Win+X Terminal lure, hunting-rule hit and 20 critical EtherHiding IDS alerts deliver malware via a fake verification overlay. Do not visit.

Risk Factors (5)

ClickFix social-engineering overlay ('Performing security verification' / 'Verification successful. Waiting for www.nasum.se to respond') luring users to run terminal commands

EtherHiding malware exfiltration confirmed by 20 critical IDS alerts

Blockchain RPC connections used as malicious script payload hosting

Primary domain (multi-source corroborated) and its own domain flagged as malware by threat intelligence

Legitimate-looking community site content used as a lure/compromised facade

Domain age information unavailable

Details

Page Title

Näsums Byutveckling

Scan Type

public

Favicon Hash

MMH3: 369827139

MD5: 5b9e435734b0e37ba2b0d4fd097c47e3

Domain Name Analysis

Domain 'nasum.se' uses the Swedish country-code top-level domain (.se) while skipping any subdomain. The second-level label 'nasum' is 5 characters long split between 2 vowels and 3 consonants. Word splitting yields 2 words: nasu, m. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Hem —Platsprojekt —-Blimedlem © Nasumsby Karta (7 ~—- Kontakt Vi vardesatter din integritet Vianvander cookies for att forbatra din webbupplevelse, visa personliga annonser eller innehall och analys...

Page Load Overview

13.01s

Total Load Time

3.7 MB

Total Size

Language Analysis

Primary Language

🇸🇪Swedish

Code: sv

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE

Text Length:5,535 chars

Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

40%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	46.30.215.39	Copenhagen, Capital Region, Denmark	AS51468One.com A/S
10	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
10	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
10	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
136	13	-	-