Security Scan Report: fedon.no

Site favicon
Submitted: Completed: publiccompleted
This website contacted 48 IPs in 4 countries across 26 domains to perform 122 HTTP transactions. The main domain is fedon.no and was registered 23 years ago.

Submitted URL: https://fedon.no

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Established Norwegian health site fedon.no flagged single-source as ClearFake malware; likely compromised. High risk until cleaned and verified.

Risk Factors (2)
Primary domain flagged as ClearFake malware (single-source, unverified community submission)
Potential site compromise: WordPress site loading third-party scripts, consistent with malware injection
Domain age information unavailable

Details

Page Title

Fedon Helse — En sunnere livsstil

Scan Type

public

Domain Name Analysis

Domain 'fedon.no' uses the Norwegian country-code top-level domain (.no) with no subdomain. The core label 'fedon' covers 5 characters holding 2 vowels versus three consonants. Breaking it apart gives 2 words: fed, on. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

a feiuleon Ned i vekt Kreft Nettbutikk Nettkurs Om Oss $ Helsepodden Q Eu HELSE NYTT NETTKURS NYTT NETTKURS Har du fått påvist SIBO eller IMO? Ditt personvern er viktig for oss esvaret betyr, hvi...

Page Load Overview

10.89s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:95%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nb-NO
Text Length:5,282 chars
Detector Agreement:100%
Language mismatch: Declared as nb-NO but detected as no

All Detected Languages

🇳🇴no(95%)🇩🇰da(4%)🇸🇪sv(1%)

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
60104.37.38.71Oslo, Oslo, Norway
AS51468One.com A/S
5172.67.71.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4216.239.34.36Google · CDNUnited States
AS15169Google LLC
4142.251.154.120Google · CDNUnited States
AS15169Google LLC
3157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.127.157Google · CDNUnited States
AS15169Google LLC
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12248--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D21429336458307B117FE6DDB1A6E70F3266C916DA0329F9B2ED546C47CCEA405A338A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vMeyhz0NaY4gGVANVAwAjPAje8UhizgxyaQNoqf66l0LAeC+PbbG2Q+xLdd0ts5k:vMeRaYfwlUHaQNnf6I0kn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:199143:AgAiABAYpYYgqC8kIckIFzEhZBOCEIBAB0pCyCIAgCYTyBRczNCEKAZIamQgK8chJ4AEUCCkEAQrTAAhMG4NSVDASgKSkSpu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000e0e0e0f0f0f0f
Perceptual Hash:99656e666564169d
Difference Hash:d5d818d8d8d9d9d9
Wavelet Hash:000f1e1e1f1f1f1f
Color Hash:32c00000000

Scan History

Scan history not available

Unable to load historical scan data