Security Scan Report: nyckeltrollet.se

Site favicon
Submitted: Completed: publiccompleted
This website contacted 22 IPs in 3 countries across 17 domains to perform 173 HTTP transactions. The main domain is nyckeltrollet.se.

Submitted URL: https://nyckeltrollet.se

AI Security Verdict

Low Risk

Confidence: 70%

2
Risk Score

Swedish software key reseller with self-branding, no credential/payment forms, and no malware or phishing indicators. Discounted licenses have uncertain provenance, so caution is advised.

Risk Factors (4)
Domain is unranked in Cisco Umbrella (weak signal).
Domain age is unknown (registry does not publish creation date).
Sells heavily discounted software licenses with unclear provenance (gray-market potential).
IDS alert for .to TLD DNS queries (potentially bad traffic) though likely false positive from tawk.to.
Safety Factors (5)
Self-branding detected: title and meta tags match the domain name (Nyckeltrollet).
No credential or payment forms, so no credential harvesting risk.
No IoC, YARA, or Safe Browsing matches against the page or its resources.
Uses legitimate third-party services (tawk.to chat, One.com webshop).
Provides terms of sale and Swedish IT support contact information.
Domain age information unavailable

Details

Page Title

Köp programvara till låga priser Nyckeltrollet.se

Scan Type

public

Domain Name Analysis

The domain name 'nyckeltrollet.se' uses the Swedish country-code top-level domain (.se) without a subdomain. The second-level label 'nyckeltrollet' is 13 characters long containing three vowels alongside ten consonants. Breaking it apart gives four words: ny, ckel, troll, et. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nyckeltrollet.se

Page Load Overview

1.88s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:3,620 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software96% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
96%
corporate business
86%
documentation technical
85%
e-commerce shopping
80%
government public service
73%

Detected Features

Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2646.30.213.70Copenhagen, Capital Region, Denmark
AS51468One.com A/S
7104.18.15.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7195.47.247.16Denmark
AS51468One.com A/S
745.60.14.54Incapsula · WAFUnited States
AS19551Incapsula Inc
746.30.212.102Copenhagen, Capital Region, Denmark
AS51468One.com A/S
7146.75.121.181Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
7172.66.161.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7195.47.247.13Denmark
AS51468One.com A/S
7104.20.42.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.18.14.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17322--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T177141975EA21203702B388C5F1193BED7993F21FAE538888F56C4768A7D2CB65A1447E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EonFUodM0Tqc/gdjJJp7OnWdQXQfyfV6Epw5hy0mN/rUvH+ZPBWxweFCfVgbNg6W:EonFUodM0TqwkjJT7OnWdQXQfyfV6ByT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:196048:Mw4M0DwAjMKGJCwFFETM06KCAtAJUTQAAATCh4mEAMckgUMCANBa4KCLAWBVJqZqsqDhj4AGGGR1GKBsQBqMSUEaDCqIoCdP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data