Security Scan Report: peha.se

Redirected to:
https://buildings.honeywell.com/de/de/brands/our-brands/peha?client=1&...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 4 countries across 18 domains to perform 313 HTTP transactions. The main domain is peha.se.

Submitted URL: https://peha.se

Effective URL:
https://buildings.honeywell.com/de/de/brands/our-brands/peha?client=1&...
Redirected

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

peha.se redirects to Honeywell's own buildings.honeywell.com PEHA brand page. No credential or payment forms, no threat-intel, YARA or IDS hits; normal corporate marketing content. Legitimate.

Safety Factors (5)
Final destination is the brand owner's own official domain (buildings.honeywell.com)
No credential, login or payment forms on the page — the sole form is a product search
No IoC, YARA, IDS, Safe Browsing or kit-roster hits
Self-branding consistent between title/meta (PEHA / Honeywell) and the destination domain
Legitimate business indicators: physical address and business entity mentioned, copyright Honeywell International Inc.
Domain age information unavailable

Details

Page Title

PEHA | Honeywell Building Technologies

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'peha.se' is registered. The second-level label 'peha' is 4 characters long holding 2 vowels versus two consonants. Tokenizing the label suggests two words: peh, a. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://peha.se

Page Load Overview

16.57s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:9,896 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical35% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
35%
download file sharing
29%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23194.9.94.85Sweden
AS39570Loopia AB
1052.225.86.113Azure · CLOUDSan Jose, California, United States
AS8075Microsoft Corporation
10104.126.37.147Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1023.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
102.16.10.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10104.16.93.80Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1023.36.156.195Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
10172.67.218.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1052.48.155.40Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
10104.18.87.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
31330--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B554951779A0231AE2D78759E6927A997920E94FFD336CDCF14D93780FC8BE24C12609

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:37prwKdoIkOKdEb9AkqIB+43MdiF1gQH5UFXaL3KjyNF6U6IKe9A8:LprwZkc8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:285557:CoKELQgAQCkB1CSSC8D3CojAIISIYIDdlgAmhAQSrggFnZAAVHG7JxREUCiY4gAAeERYGhGsWRIFRR0IAJFTIq1ABBeArxAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff030303038fff
Perceptual Hash:bfc0c03fc03b3f0c
Difference Hash:c57b7f5f7f7f3f06
Wavelet Hash:ffff0101010187ff
Color Hash:#1f5393

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data