Security Scan Report: goteborgselbolag.nu

Redirected to:
https://www.cheapenergy.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 44 IPs in 4 countries across 26 domains to perform 187 HTTP transactions. The main domain is goteborgselbolag.nu.

Submitted URL: https://goteborgselbolag.nu

Effective URL:
https://www.cheapenergy.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Swedish energy retailer site reached via a cross-domain redirect; self-branded, no credential or payment forms, no threat-intel, hunting rule, or IDS hits. Only weak signals (unranked final domain, redirect chain) — low risk.

Risk Factors (3)
Cross-domain redirect chain (goteborgselbolag.nu -> www.cheapenergy.se) with 3 hops, so the entry domain's age/reputation do not describe the served page
Final domain cheapenergy.se is unranked and its registration age could not be confirmed
Two eval() calls present (common in frameworks/bundlers, no other evidence of malicious use)
Safety Factors (5)
No credential, password or payment form anywhere on the page
Page presents its own brand ('Cheap Energy'), no impersonation of another entity
No Indicators of Compromise, hunting rule, IDS, or Safe Browsing hits
Cross-origin requests go only to well-known analytics/advertising/CDN hosts (Google, DoubleClick, Ahrefs, Cookiebot, Facebook)
Corporate content with physical address and social media presence, consistent with a real energy retailer
Domain age information unavailable

Details

Page Title

Elbolag - Billiga och gröna elpriser

Scan Type

public

Domain Name Analysis

The domain name 'goteborgselbolag.nu' uses the .nu country-code top-level domain while skipping any subdomain. The second-level label 'goteborgselbolag' is 16 characters long containing six vowels alongside 10 consonants. It segments into 5 words: go, teborg, sel, bola, g. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

CHEAP [qeganGtyet) cnergifaktura® Elursprung Kundservice ~ Omoss Elpris sE@ Mina sidor 2, ENERGY Uiokade eppetidertil 19.15 AN Cookiebot Useroentes Trott pa dyra elrakningar? Consent Details Bi |...

Page Load Overview

7.23s
Total Load Time
5.4 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:11,628 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1593.188.2.53Sweden
AS39570Loopia AB
4194.9.94.86Sweden
AS39570Loopia AB
423.50.131.159Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
413.35.58.2Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
423.45.103.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4172.64.148.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.64.151.40Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.72.75Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18744--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1942408713541703E172F9EE9A147FB1E52D392C9CA8060D4D1F4837C5AE2CA179FA3AA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/USEnsQyB5hhh2GdF7/UxhI+VaR2iGUstNv0hvGvAn5bhlH+s2goY47tO5X0JN5y:/USEnsQypwqbP7Z47t0X0JN5lPL3Of

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:229567:QAIDARcaIEgC5+gqyUgoDkQB86xICCJF2W5QggAw5AVkIcZ/C3IgABOQAOGQQ1EBfRgYhhBEQIAUBgAqJUSZBEzRFJCQWB6I

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f003c3c3c0007ff
Perceptual Hash:8f0bf034c29ecec3
Difference Hash:7d5f79e9e97e3e16
Wavelet Hash:bf003c3c3c0507ff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data