Security Scan Report: tibb.se

Redirected to:
https://tibb.se/Account/Login.aspx?ReturnUrl=%2f
Site favicon
Submitted: Sep 27, 2026, 12:40:12 PMCompleted: Sep 27, 2026, 12:40:49 PMpubliccompleted

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is tibb.se.

Submitted URL: https://tibb.se

Effective URL:

https://tibb.se/Account/Login.aspx?ReturnUrl=%2f
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Self-branded Swedish login page (TIBB) posting same-origin with no impersonation, malware, or threat-intel hits. Unknown age and unranked domain, so unverified — treat as moderate risk until legitimacy is confirmed.

Risk Factors (3)
Domain has no published creation date (unknown age) and is not ranked in Cisco Umbrella top 1M
Login form with password field on a domain whose legitimacy cannot be corroborated
One eval() call present in page JavaScript (weak signal; common in legacy ASP.NET/WebForms pages)
Safety Factors (4)
Self-branding detected — site presents its own name matching its own domain, not another brand
Form action is same-origin (tibb.se), no cross-origin credential submission
No Indicators of Compromise, no YARA malware patterns, no IDS alerts, no credential exfiltration
No payment fields, no disguised password fields, no unicode confusion
Domain age information unavailable

Details

Page Title

TIBB - Logga in

Scan Type

public

Domain Name Analysis

Domain 'tibb.se' uses the Swedish country-code top-level domain (.se) without a subdomain. The second-level label 'tibb' is 4 characters long holding one vowel versus 3 consonants. Segmentation suggests two words: t, ibb. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tibb.se

Page Load Overview

2.08s
Total Load Time
31 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

Text Length:357 chars
Detector Agreement:50%

Website Classification

Primary Category

documentation technical99% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
99%
technology software
74%
cryptocurrency blockchain
74%
government public service
34%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
951.12.31.2Azure · CLOUDSweden
AS8075Microsoft Corporation
91--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17C22742299BE18395557D0E99513E74918E5C223CF1EC80DFEAC4C299FE0F475F22BA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1CBFfU//vNEigvDnNJ/tcy+Qa3FNgrJ/DzqM/sPX1B7K3TcVhGqRpXSnaR+whbbz:LPNOnNJ/tcy+QaVaF/DzqMEPHm3TcVh3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10735:UyNSEEJyhMi9QXoRxDIhSxQQCAMIAYKswEUEgERKCAAgCgBChHNGFGWjIGYBYrVREBnJMtYkCjRU5KWUxgiSe4OUIgghQ5ag

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c3c000000
Perceptual Hash:dece646561717164
Difference Hash:9661696169064000
Wavelet Hash:81bdbdbd3d030303
Color Hash:#98c587

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data