Security Scan Report: toffelshop.se

Redirected to:
https://toffelshoppen.se/
Site favicon
Submitted: Sep 28, 2026, 12:10:12 PMCompleted: Sep 28, 2026, 12:10:59 PMpubliccompleted

This website contacted 11 IPs in 3 countries across 9 domains to perform 72 HTTP transactions. The main domain is toffelshoppen.se and was registered 18 years ago.

Submitted URL: https://toffelshop.se

Effective URL:

https://toffelshoppen.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 74%

2
Risk Score

Swedish footwear webshop on toffelshoppen.se. Cross-domain redirect from toffelshop.se, self-branded, no credential/payment forms, no IoC/YARA/IDS hits. No malicious signal; low risk.

Safety Factors (5)
No credential or payment form present (password/disguised/payment fields all 0)
No Indicators of Compromise, YARA or Suricata hits
Self-branding: title/meta reference 'toffelshop' which matches the (redirect-chain) domain — not impersonation of a third party
Real product catalogue naming legitimate brands (UGG, Shepherd, Glerups, Copenhagen Shoes) as goods sold, not impersonated
Klarna and established analytics hosts indicate a normal commerce stack
Domain age information unavailable

Details

Page Title

Tofflor TOFFELSHOPPEN

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'toffelshop.se' is registered and has no subdomain. Count 10 characters in 'toffelshop' split between 3 vowels and seven consonants. Splitting it apart reveals 4 words: t, of, fels, hop. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://toffelshop.se

Page Load Overview

8.39s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:4,099 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service58% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
58%
healthcare medical
56%
documentation technical
55%
e-commerce shopping
50%
blog personal website
50%

Detected Features

Search
Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.67.163.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6194.9.94.86Sweden
AS39570Loopia AB
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
63.174.46.37Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
64.208.245.247Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
6142.250.154.97Google · CDNUnited States
AS15169Google LLC
6104.20.23.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.21.57.129Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
64.208.244.59Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
7211--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E6539561D19E2C3F06A2B1A1A5982B28B58B650AD733CD51F2FEE30F3F81D41497661E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:HUwJkkrKo5AOO5YW9jExLO0ScuRC6H1iXQFqNQrGoJqvtFHfgcsy3FQYVsk6+1l:HHjScdjhEYVsk6+1l

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:65522:LAUNQDRwsog5IgDEgUDRhiEMEIQiQHRRyL8eA2IBEBhdpkITNj5pgQUOaMQBcVRLoSO7ZQFZQnjKOqAp4ECQUEQgiAOAogBD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:66ffc3c3c3ffc3c3
Perceptual Hash:bcd31c923d32173c
Difference Hash:cc130f0f373696b2
Wavelet Hash:04f7c3c3c3c3c3c3
Color Hash:#1f937e

Scan History

Scan history not available

Unable to load historical scan data