Security Scan Report: xn--vrmepumpbors-gcby.se

Redirected to:
https://energiror.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 8 domains to perform 128 HTTP transactions. The main domain is xn--vrmepumpbors-gcby.se.

Submitted URL: https://xn--vrmepumpbors-gcby.se

Effective URL:
https://energiror.se/
Redirected

AI Security Verdict

Safe Website

Confidence: 78%

1
Risk Score

Energirör (energiror.se) is a Swedish VVS/värmepump business showing its own brand, with no forms, no credential or payment collection, and no threat-intel, YARA or IDS hits. The punycode entry host merely redirects here.

Safety Factors (5)
No credential, login or payment form anywhere on the page
No Indicators of Compromise, malware, phishing or IDS hits
Page presents its own brand (Energirör) matching the serving domain — no impersonation of another entity
IVT appears only as a dealership/partner reference ('auktoriserat IVT Center'), which is a commercial relationship disclosure, not a claim to be IVT
Rich, coherent business content (services, products, service booking, hiring page) rather than a thin lure page
Domain age information unavailable

Details

Page Title

Energirör | IVT Center Borås/7H - Värme, Vatten & Sanitet

Scan Type

public

Domain Name Analysis

Domain 'xn--vrmepumpbors-gcby.se' uses the Swedish country-code top-level domain (.se) with no subdomain. The registrable portion 'xn--vrmepumpbors-gcby' spans 21 characters with three vowels and 15 consonants, notching 3 hyphens. Tokenizing the label suggests 8 words: xn, vr, me, pump, bor, s, gc, by. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--vrmepumpbors-gcby.se

Page Load Overview

1.87s
Total Load Time
25.7 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:2,931 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
65%
documentation technical
64%
blog personal website
49%
adult content
46%
healthcare medical
45%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16185.158.133.1Cloudflare · CDNUnited Arab Emirates
AS13335Cloudflare, Inc.
16194.9.94.86Sweden
AS39570Loopia AB
16142.251.110.95Google · CDNUnited States
AS15169Google LLC
16142.250.154.94Google · CDNUnited States
AS15169Google LLC
16172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16145.253.155.222Delmenhorst, Lower Saxony, Germany
AS3209Vodafone GmbH
16104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1288--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B45319243104923F46379B94F5D0F71DE569F206C9ABC868F2EE10DB67C2FE18E61A19

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:JrtPMsnB7cxksc64Jysq7v5End2xKvVnTYhYvYPY42YOAwasQpRa+KuDnQGYQYtH:JrCXx/c64Jysq7vJ73T3/DKWu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:64583:AYoHQFIpVAEIn0kwRUEmKl2gA0IApxFsJGBwkLITSGhAmzAJBz0EAgMYDQ4ASAYiAiAXBO9BBQs1EYDAUKjiETqTQI+jVkC+

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0042764240407c3c
Perceptual Hash:c025cb6149db36de
Difference Hash:c184a4949696e9f9
Wavelet Hash:20767e5e52407e7c
Color Hash:#6ce0bd

Scan History

Scan history not available

Unable to load historical scan data