Security Report: qvesarum.se - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8723fff9-b659-4438-9bf6-2c6df5dacd01 Domain and IP registration (RDAP)/api/v1/rdap/8723fff9-b659-4438-9bf6-2c6df5dacd01 Certificate Transparency/api/v1/ct/qvesarum.se How often this domain was scanned/api/v1/domain/stats/qvesarum.se Scan history for this domain/api/v1/domain/history/qvesarum.se?limit=15

This website contacted 64 IPs in 5 countries across 47 domains to perform 490 HTTP transactions. The main domain is qvesarum.se and was registered 3 years 10 months ago.

Submitted URL: https://qvesarum.se

AI Security Verdict

Low Risk

Confidence: 55%

Risk Score

Established 3.9-year-old Swedish Shopify storefront with self-branding and no credential forms, but one loaded third-party resource (fly.storage.tigris.dev) is flagged as lummac2 malware infrastructure.

Risk Factors (2)

A third-party resource loaded by the page is flagged as the lummac2 malware family by two corroborated threat-intelligence feeds; shared object-storage hosts such as tigris.dev are frequently abused to stage stealer payloads

Domain is not ranked in the Cisco Umbrella top 1M, giving no independent reputation corroboration for the storefront

Safety Factors (6)

Domain registered 2022-11-13 (1416 days / ~3.9 years old) — well-established, not a fresh registration

Site displays only its OWN brand (Qvesarum) on its own matching domain — no brand impersonation or typosquatting

No credential-harvesting or payment form present in the DOM (0 password, 0 disguised-password, 0 payment fields)

Content is a coherent Swedish retail catalogue (bathrooms, doors, lighting, stoves) matching an ordinary e-commerce business

No JavaScript malware YARA matches, no IDS alerts, no cross-origin credential exfiltration detected

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3

Domain age information unavailable

Details

Page Title

Qvesarum – Klassisk inredning & byggvaror med hög kvalitet

Scan Type

public

Favicon Hash

MMH3: -37200166

MD5: 9103697c344bd7cbc8515d6f316c8cae

Domain Name Analysis

The domain 'qvesarum.se' uses the Swedish country-code top-level domain (.se) with no subdomain. The core label 'qvesarum' covers 8 characters split between 3 vowels and five consonants. Breaking it apart gives three words: q, ves, arum. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.32s

Total Load Time

22.1 MB

Total Size

Language Analysis

Primary Language

🇸🇪Swedish

Code: sv

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:sv

Text Length:121,056 chars

Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

e-commerce

40%

Detected Features

Products

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
49	23.227.38.65Cloudflare · CDN	Ottawa, Ontario, Canada	AS13335Cloudflare, Inc.
7	23.227.39.200Cloudflare · CDN	Ottawa, Ontario, Canada	AS13335Cloudflare, Inc.
7	104.18.43.170Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.67.204.196Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.18.39.49Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.97Google · CDN	United States	AS15169Google LLC
7	104.26.15.69Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	34.149.60.135Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	185.111.111.155	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
7	34.160.147.240Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
490	64	-	-