Security Scan Report: 404haven.se

Redirected to:
https://cloud.404haven.se/login?redirect_url=/apps/oidc/resume?t%3Ddb4...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 31 HTTP transactions. The main domain is 404haven.se.

Submitted URL: https://404haven.se

Effective URL:
https://cloud.404haven.se/login?redirect_url=/apps/oidc/resume?t%3Ddb4...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Nextcloud login page on a domain with unknown age and no reputation. No concrete signs of phishing or malware, but caution is advised due to lack of established trust.

Risk Factors (1)
Credential login form on a domain with unknown age and no established reputation
Safety Factors (5)
Login form action is same-origin (/login)
No cross-origin credential exfiltration detected
No threat intelligence matches
Standard Nextcloud login page with default meta tags
No JavaScript malware patterns or obfuscation
Domain age information unavailable

Details

Page Title

Login – Nextcloud

Scan Type

public

Domain Name Analysis

You're looking at domain '404haven.se' on the Swedish country-code top-level domain (.se) without a subdomain. Its registrable label '404haven' stretches across 8 characters with 2 vowels and 3 consonants, notching three digits. Breaking it apart gives two words: 404, haven. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Log in to Nextcloud count nam Remember n Log in with a device Forgot password?

Page Load Overview

3.86s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:283 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
76%
documentation technical
39%
real estate property
27%
corporate
25%

Detected Features

Login Form
Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
312--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BFF45BE7A8583532A923C719708F962E3356B10309214A85D9CE70850FFB7EE77B166F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:RHbmqjhfQjICmcgqAzsEdPwuM/6CuMjwjICu0wulR8:RNjRQjICmcAoEdPd4jwjIYh8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:767461:GsBIGIQASigTEFlUCgEdAApCgZsRSTEmAAIOQIkELgGE0VQUIERIJI0MZcGQLZI4CEJwUSJADiCAoTCNBIwRJiCAOBIiOwAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff8fc08003030
Perceptual Hash:c5f8e73690c04fcc
Difference Hash:c0423390b469c0c0
Wavelet Hash:fffff8fc08003030
Color Hash:0e403000040

Scan History

Scan history not available

Unable to load historical scan data