Security Scan Report: baltzarhar.se

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 22 HTTP transactions. The main domain is baltzarhar.se.

Submitted URL: https://baltzarhar.se

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Page appears to be a hair salon with self-branding matching its domain. ML classifier flags it as phishing (93% confidence), but no concrete malicious signals were found.

Risk Factors (1)
ML classifier flags page as 'phishing scam' with 93% confidence
Safety Factors (5)
Domain is over 10 years old (registered 2016)
Self-branding matches domain (Baltzar Hår is the salon's own name)
No credential or payment forms - only a standard contact form
No Indicators of Compromise, YARA, or IDS alerts
No cross-origin credential exfiltration or suspicious JavaScript behavior
Domain age information unavailable

Details

Page Title

Baltzar Hår Malmö

Scan Type

public

Domain Name Analysis

Domain 'baltzarhar.se' uses the Swedish country-code top-level domain (.se) and has no subdomain. Count 10 characters in 'baltzarhar' split between three vowels and 7 consonants. Tokenizing the label suggests 3 words: baltz, ar, har. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://baltzarhar.se

Page Load Overview

3.95s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,513 chars
Detector Agreement:50%

Website Classification

Primary Category

phishing scam93% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
93%
social media network
93%
finance banking
92%
blog personal website
89%
news media journalism
89%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
492.113.16.49Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
392.113.23.254Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
227--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CDD2B732E0E801263B5A83EDC591B32CA9949707DB0A57A571FC216C9FC4EF708B762D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:unNE8KbIqGdNJ6Ih7a4r/ZdSZUaAhHkWml/Fb4+g1DlcEvm8clfl5yhKytikwZ2k:unbKbpGDZdypa9DD1vMl8tikjh2Fh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30201:w4RFA3NCCGKgukQJ7TTBiEUIKAa/hhgAMAQSYEEQCnYDFIVBicEQXAJCVENBwGIgXOBYsBEwgYYJiwTmABCgQHSJEltpgwEB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff003c3d11118100
Perceptual Hash:8bc3f0b481dfc0a7
Difference Hash:0b936161f3232b71
Wavelet Hash:ff01bd3d3dd58100
Color Hash:#d22d53

Scan History

Scan history not available

Unable to load historical scan data