Security Scan Report: www.csab.se

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 5 domains to perform 38 HTTP transactions. The main domain is csab.se and was registered 17 years ago.

Submitted URL: https://www.csab.se

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate 17-year-old Swedish telecom site whose pages load JavaScript from two domains flagged as malicious; a CRITICAL IDS JavaScript-redirect alert corroborates a likely compromise. Avoid until cleaned.

Risk Factors (5)
Third-party script from wafsearch.wiki flagged as wp inject (malicious) across 2 feeds
Third-party script from es6featureshub.com flagged as ek clearfake (malicious) across 2 feeds
CRITICAL IDS alert for multi-stage JavaScript redirect activity
Unranked script host wafsearch.wiki serving code into the page
HUNTING alerts for likely JavaScript-obfuscator usage (informational, corroborating the injected-script pattern)
Domain age information unavailable

Details

Page Title

CSAB – Communication & Security AB

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'www.csab.se' is registered with subdomain 'www'. The registrable portion 'csab' spans 4 characters containing 1 vowel alongside 3 consonants. Tokenizing the label suggests two words: csa, b. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.csab.se

Page Load Overview

1.60s
Total Load Time
369 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:2,167 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business52% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
52%
government public service
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1146.30.215.56Copenhagen, Capital Region, Denmark
AS51468One.com A/S
9142.251.14.95Google · CDNUnited States
AS15169Google LLC
9142.251.20.97Google · CDNUnited States
AS15169Google LLC
9162.244.35.233Santa Clara, California, United States
AS14576Hosting Solution Ltd.
384--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EDA3093A1E4022D52F9FABD5BDB5B55CD22CE80F7A840C0972AC28D47B01D21D8E3A7D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ThapOWesEQZFWWnp7uZFWWnp7ZFWWnp7ZFWWnpe3FRmZFWWn8mZFWWnAZFWWnp7N:sMW+9pkDcqT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:100104:AJCFAEYCSigkxYwCHDgSQZmQQAyCIKUkFpaqgEmUxDAgtRpRBMFIQWIEJGIAqIAVHQoiKDkQPSAhCyEOFjQADIYZJDoi5oII

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3e3c3c3ffff
Perceptual Hash:e46c9b9366c71338
Difference Hash:20362626861eb616
Wavelet Hash:dec3c3c3c2c2c3c3
Color Hash:#763a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data