Security Scan Report: wondr.se

Redirected to:
https://wondr.cc/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 3 countries across 15 domains to perform 73 HTTP transactions. The main domain is wondr.se.

Submitted URL: https://wondr.se

Effective URL:
https://wondr.cc/
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Self-branded fitness-business SaaS on wondr.cc with no forms, no impersonation of another brand, and no Indicators of Compromise. Only weak signals: a cross-domain redirect and generic .cc-TLD IDS alerts. Low risk.

Risk Factors (2)
Cross-domain redirect (wondr.se -> wondr.cc) with the final domain unranked and of unknown age
Two HIGH Suricata alerts for '.cc TLD' DNS queries (generic TLD-based heuristic, not a phishing/malware signature)
Safety Factors (5)
No credential, login or payment form on the page
Self-branding: title/meta name 'Wondr' matches the serving domain
Third-party integrations are mainstream legitimate services (HubSpot, Cookiebot/consent)
No Indicators of Compromise, no YARA malware, no known malicious kit
Content structure typical of a real commercial SaaS product site
Domain age information unavailable

Details

Page Title

Wondr

Scan Type

public

Domain Name Analysis

Domain 'wondr.se' uses the Swedish country-code top-level domain (.se). The core label 'wondr' covers 5 characters containing one vowel alongside 4 consonants. It segments into 2 words: won, dr. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wondr.se

Page Load Overview

5.54s
Total Load Time
10.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:14,969 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.60.103.39Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
4198.49.23.145Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
434.88.158.158Google · CDNLappeenranta, South Karelia Region, Finland
AS396982Google LLC
4141.101.90.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4141.101.90.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.65.236.181Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.65.202.201Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.65.238.60Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
4172.65.198.159Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7318--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0E3C57771DD31AE4717C6F15691EB5BA5E201EEE7C01488E1A393382AC2C4B9C6C1BB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1Gn5nXslsstNv0hvGvAi70BYlqndl5knAiNiOiPs3HxDQiu:0sr0Vndl5kMWx4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:154054:ALQdhEiIqAEAhiBAgyMhyE8EFTFJkh1/GgQRIdLkaGAqECGE4MGwABEeGNRTRcUkRIJQAIhIEABIOghRFAkCwQRBgIZkQJAf

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:13003c3c18181000
Perceptual Hash:ccb3352c998dad31
Difference Hash:b2d8e8f1f1b1b298
Wavelet Hash:1b3c7c7c3c387858
Color Hash:#1f9388

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data