Security Scan Report: battrehalsa.se

Redirected to:
https://narokallan.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 34 IPs in 4 countries across 28 domains to perform 145 HTTP transactions. The main domain is battrehalsa.se.

Submitted URL: https://battrehalsa.se

Effective URL:
https://narokallan.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Legitimate-looking Swedish supplement shop on its own domain; own-brand self-labeling, same-site login, no threat-intel, malware or exfiltration signals. Only a minor DevTools-blocking quirk.

Risk Factors (1)
JavaScript blocks DevTools/right-click (weak anti-analysis signal on its own)
Safety Factors (5)
Own-brand domain matching page title and meta description
All forms post to the same registrable domain; no cross-origin credential exfiltration detected
Rich, coherent product catalogue, reviews, blog content and customer-service pages
Standard consent management (Cookiebot) and recognised e-commerce/marketing scripts
No Indicators of Compromise, YARA, Safe Browsing or network IDS findings
Domain age information unavailable

Details

Page Title

Närokällan – kosttillskott utan onödiga tillsatser

Scan Type

public

Domain Name Analysis

Domain 'battrehalsa.se' uses the Swedish country-code top-level domain (.se) without a subdomain. The core label 'battrehalsa' covers 11 characters split between 4 vowels and 7 consonants. Breaking it apart gives four words: bat, tre, hals, a. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://battrehalsa.se

Page Load Overview

6.89s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:28,991 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce40% confidence
Type: spa
Method: structural

All Detected Categories

e-commerce
40%

Detected Features

Login Form
Search
Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1313.49.199.225Aws · CLOUDStockholm, Stockholm County, Sweden
AS16509Amazon.com, Inc.
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
423.52.181.3Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
4146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
418.173.205.27Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.20.41.87Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
4142.250.154.94Google · CDNUnited States
AS15169Google LLC
454.220.40.220Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
14534--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B815172172F1283F4167C1E976A9F30E2BEA9147D5864840F9DE47386FC6C51A83B3AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:cUzRclcOBhj+meiZ/RgQcUvObzbeRjWUlKy:TFclcOT9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:894996:CRG0RWAgB4kAAIiUMOiUAUyYdBKChIIEC40iEFTSDmSp8A4VAGQkiNAMqJAQU6M93gAwZkQmCFsCaItJAAYCAIFYKWGEC4O4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data