ScanMalware.com

Security Scan Report: handelsbanken-uat.onlinegp.co

Redirected to:
https://handelsbanken-uat.onlinegp.co/terms-and-conditions
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/921cc46b-a824-42b4-9979-aff2e357c57cDomain and IP registration (RDAP)/api/v1/rdap/921cc46b-a824-42b4-9979-aff2e357c57cHow often this domain was scanned/api/v1/domain/stats/handelsbanken-uat.onlinegp.coScan history for this domain/api/v1/domain/history/handelsbanken-uat.onlinegp.co?limit=15
This website contacted 17 IPs in 3 countries across 13 domains to perform 90 HTTP transactions. The main domain is onlinegp.co and was registered 6 years ago.

Submitted URL: https://handelsbanken-uat.onlinegp.co

Effective URL:
https://handelsbanken-uat.onlinegp.co/terms-and-conditions
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Terms page on HealthHero's onlinegp.co platform, attributed to a partner organisation; aged domain, no forms, no credential or payment collection, no Indicators of Compromise or malware signals. Only caveat is the exposed 'uat' test subdomain.

Risk Factors (2)
Publicly reachable subdomain carries a 'uat' (user-acceptance-testing) label, suggesting a pre-production environment that may be indexed or exposed unintentionally rather than a hardened production site.
Domain onlinegp.co is not ranked in Cisco Umbrella top 1M (weak prior only, not evidence of wrongdoing).
Safety Factors (5)
Established 6-year-old domain with visible legal pages (terms, privacy policy) and a merchant physical address.
No credential, login, or payment form on the scanned page — no data collection surface.
No Indicators of Compromise, no hunting-rule hits, no network IDS alerts, no kit-roster matches.
Brand name in the subdomain reflects a disclosed partner/organisation relationship rather than a claim to be the bank's own official website; the page self-identifies the service provider as HealthHero.
Payment/analytics scripts limited to Stripe and standard analytics, with no cross-origin form submissions.
Domain age information unavailable

Details

Page Title

Handelsbanken Online GP

Scan Type

public

Domain Name Analysis

Domain 'handelsbanken-uat.onlinegp.co' uses the Colombian country-code top-level domain (.co) with subdomain 'handelsbanken-uat'. The second-level label 'onlinegp' is 8 characters long with 3 vowels and five consonants. Splitting it apart reveals two words: online, gp. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Terms and Conditions This service is provided by HealthHero. Please read HealthHero Terms and Conditions carefully as they contain important information on the scope of the services HealthHero provi...

Page Load Overview

3.94s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,472 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(99%)🇫🇷fr(1%)

Website Classification

Primary Category

finance banking53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
53%
technology software
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
44150.171.109.106Azure · CLOUDUnited States
AS8075Microsoft Corporation
12216.239.32.36Google · CDNUnited States
AS15169Google LLC
8104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
734.149.115.137Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5150.171.109.100Azure · CLOUDUnited States
AS8075Microsoft Corporation
53.174.46.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5192.178.183.97Google · CDNUnited States
AS15169Google LLC
5104.18.19.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
53.174.46.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9017--

Detected Technologies5

Azure
50%
Azure Front Door
40%
Stripe
35%
Google Analytics
35%
CookieYes
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BF230933B018306E123FB5CAB4E2875F3463CE5BC917756CA2E3917C87D9D924E96286

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Zh0iUinck7koAMyNNVv5115JC2e15UWfAAY2avzuUdRjweQHDCuf7zfu:vckVyNPtCVZGgq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48581:9BAiCJCgIgIgrBKgtiI4ELDFELAQZBXqnAk5mE6YgGCAWLKE6GwAImEgYQgRQWBCwAUQIlVIAWBFRBAgAVUEYFgFwDRNcCBq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffff00
Perceptual Hash:bcbc48c355896ae3
Difference Hash:b02f3b3e4c0d0028
Wavelet Hash:00878383e7ffff00
Color Hash:060001c0000

Other Hashes

Crop Resistant:b02b3b3e0c0c3204,0080402020c00000

Scan History

Scan history not available

Unable to load historical scan data