Security Scan Report: blomsterkurs.se

Redirected to:
https://www.wilthornblomster.se/kurser
Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 3 countries across 21 domains to perform 76 HTTP transactions. The main domain is blomsterkurs.se.

Submitted URL: https://blomsterkurs.se

Effective URL:
https://www.wilthornblomster.se/kurser
Redirected

AI Security Verdict

Safe Website

Confidence: 85%

1
Risk Score

Legitimate Swedish florist's course page on its own domain (blomsterkurs.se redirects to wilthornblomster.se). Self-branded, no credential or payment forms, no threat-intel or malware signals.

Safety Factors (5)
Self-branding consistent across page title, Open Graph tags, footer and the final domain
No credential or payment form; newsletter subscription is a standard marketing form on the shop's own domain
Real-world business details: street address in Husie/Malmö, phone number 040-15 45 80, business e-mail, course schedules and prices
Built on the established Swedish e-commerce platform Quickbutik with Klarna payment assets
No Indicators of Compromise, malware, obfuscated script or IDS alert
Domain age information unavailable

Details

Page Title

Kurser - Wilthorn blomster & blandat

Scan Type

public

Domain Name Analysis

You're looking at domain 'blomsterkurs.se' on the Swedish country-code top-level domain (.se). Count 12 characters in 'blomsterkurs' holding three vowels versus nine consonants. It segments into three words: blom, sterk, urs. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://blomsterkurs.se

Page Load Overview

2.11s
Total Load Time
7.0 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:5,780 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8162.159.129.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23.121.61.201Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.97Google · CDNUnited States
AS15169Google LLC
23.5.73.92Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
213.35.58.67Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23.174.46.39Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.150.4Google · CDNUnited States
AS15169Google LLC
7635--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E6141A05AAF22035042B61B9BBEB624931399013F546CD64B98C87846FC7F68CE677FD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:b8PtfofQcCZ74KcTeMjUfhkjQEt81YfVDl1J2zSEH2WIE:K2eMYfDc2zSA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:201618:ICIJGBCKoC2EigHAN6+I0AJqE9MdwCIeiwHyCRCqBzIAAakD0cnGMCHCCiGWk5UJheEC4QKAicBGATACNAFbCAECCA4HEYEV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7ffffffffc3f1
Perceptual Hash:ed136d126f181b6c
Difference Hash:590e3a181a102723
Wavelet Hash:0000dfcfcfcfc1d1
Color Hash:#1f5393

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data