Security Scan Report: haboportalen.se

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 15 domains to perform 70 HTTP transactions. The main domain is haboportalen.se.

Submitted URL: https://haboportalen.se

AI Security Verdict

Safe Website

Confidence: 88%

0
Risk Score

Long-established Swedish local news portal (domain since 2004) with only a same-origin search form; no threat-intel, YARA, IDS or phishing signals. Unranked status alone is not evidence of wrongdoing.

Safety Factors (5)
Well-established domain (8228 days old, registered 2004)
Verified form facts: 0 password fields, 0 disguised password fields, 0 payment fields
No cross-origin credential forms or credential exfiltration detected
Threat intelligence, YARA, kit roster and Suricata IDS all clean
Legitimate local-news content with bylines, dates and event coverage; physical address visible
Domain age information unavailable

Details

Page Title

HåboPortalen.se - allt om Håbo - sedan 2003

Scan Type

public

Domain Name Analysis

The domain 'haboportalen.se' uses the Swedish country-code top-level domain (.se) while skipping any subdomain. Count 12 characters in 'haboportalen' containing five vowels alongside seven consonants. Tokenizing the label suggests 4 words: hab, o, portal, en. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://haboportalen.se

Page Load Overview

13.81s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:20,410 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as sv

Website Classification

Primary Category

government public service42% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
42%
education learning
42%
forum
25%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1091.201.60.30Sweden
AS44136ODERLAND Webbhotell AB
663.187.98.82Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
6143.204.181.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6142.251.14.157Google · CDNUnited States
AS15169Google LLC
6157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
663.189.131.154Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
6162.55.219.204Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
6142.251.152.119Google · CDNUnited States
AS15169Google LLC
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
7011--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D932185CAED16170FA1307DEA3AF28A90228A0C7200DD484F54CEDE87F5BBDC4A57A57

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GXHNsGeTHQpD+da6+8QPUV7lrDyjFrxzrbqFtC5SmaRUM:GXX+/zV7SFZKFtyaRUM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11628:UEAQYGCGqISoBATrQyFG6BhAZbghEygfgskIYAIBKbicAaUshgNBQ0AEAJABVJQ1kDKA0IIcTiCNAMBUCBiJZQlCgoYA7NIw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff81ffffffff
Perceptual Hash:bf2fc0c03f3fc0c0
Difference Hash:0000012301000000
Wavelet Hash:ffffff8100000000
Color Hash:#d23d2d

Other Hashes

Crop Resistant:0000012301000000

Scan History

Scan history not available

Unable to load historical scan data