Security Scan Report: intyg.nu

Site favicon
Submitted: Oct 5, 2026, 6:00:31 AMCompleted: Oct 5, 2026, 6:01:40 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Swedish medical-certificate site with its own brand, a plain contact form (no password/payment fields) and no malware. Risk rests only on one IDS Spamhaus DROP alert and a single-source abuse tag on a third-party sub-resource address.

Risk Factors (1)
Network IDS HIGH alert (ET DROP Spamhaus DROP Listed Traffic Inbound)
Safety Factors (6)
Self-branding detected — site's own brand matches its domain; no impersonation of another entity
No credential or payment form (0 password, 0 disguised-password, 0 payment fields; contact form only)
No JavaScript malware / YARA hits and no known malicious kit in the roster
No cross-origin credential exfiltration; cross-origin calls limited to Google Analytics and Google Maps
Domain ~255 days old (6+ months) with physical address, phone, email and social links published
Single-source abuse-reputation tag concerns a third-party sub-resource address, not this site's host
Domain age information unavailable

Details

Page Title

Medicinska intyg Malmö - Din pålitliga källa hos MACC People

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'intyg.nu' is registered while skipping any subdomain. Count 5 characters in 'intyg' holding 1 vowel versus four consonants. Segmentation suggests three words: in, ty, g. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://intyg.nu

Page Load Overview

13.92s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,037 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as sv

Website Classification

Primary Category

healthcare medical55% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
55%
news/blog
35%
corporate
35%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25185.15.122.39Sweden
AS61207Hostek AB
5142.250.154.97Google · CDNUnited States
AS15169Google LLC
5104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
591.202.233.146Ashgabat, Ashgabat, Turkmenistan
AS200593Prospero Ooo
5104.18.179.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.13.139Google · CDNUnited States
AS15169Google LLC
14024--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1603428623D17043C312F694F504B630C6069C9D7E666AAEAF8B91029D7F9DE233F3619

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:k/dUAdx5lo/z6OcH/RjVIopGpZlEagiMtAPElC3X7kTl7wBU4Fqm8xbM900:kJ5lo/z6OipjVIv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:233040:ADfCgyFA88frABUMmUDABAAoQRFsR0jNlIIMBgapGQKA4QQEBIzOdyZIVBuQEKSJ0gAwAWBqRghuBIdGgObO1iBgGFKKgEhA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3d191f3ffe7e3
Perceptual Hash:ec4c939b649a9365
Difference Hash:382627270720170e
Wavelet Hash:df808091c1ffc7e2
Color Hash:#6a2d86

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data