Security Scan Report: gotsport.se

Redirected to:
https://rfsisu.se/gotland
Site favicon
Submitted: Oct 4, 2026, 4:10:15 PMCompleted: Oct 4, 2026, 4:11:08 PMpubliccompleted

This website contacted 8 IPs in 3 countries across 7 domains to perform 53 HTTP transactions. The main domain is rfsisu.se and was registered 13 years ago.

Submitted URL: https://gotsport.se

Effective URL:

https://rfsisu.se/gotland
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

1
Risk Score

Domain move from gotsport.se to rfsisu.se, the official RF-SISU Gotland sports-federation site. No forms collect credentials or payment, no Indicators of Compromise, malware or IDS hits — appears legitimate.

Safety Factors (5)
Content is a genuine Swedish district sports federation site (education, grants, association finder, contact details, cookie policy).
No credential, login or payment collection anywhere on the page.
No Indicators of Compromise, malware, YARA or IDS evidence; no obfuscated or exfiltrating JavaScript.
Only hidden fields are cookie-consent categories and a CSRF token — standard, non-suspicious.
Self-branding matches the final domain; the redirect lands on the organisation's own domain, which is not brand impersonation.
Domain age information unavailable

Details

Page Title

Gotland

Scan Type

public

Domain Name Analysis

Domain 'gotsport.se' uses the Swedish country-code top-level domain (.se). Its registrable label 'gotsport' stretches across 8 characters with 2 vowels and six consonants. Breaking it apart gives two words: got, sport. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gotsport.se

Page Load Overview

15.87s
Total Load Time
26.9 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:3,471 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service99% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
99%
education learning
96%
news media journalism
93%
blog personal website
88%
finance banking
48%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11185.84.52.38Sweden
AS41174SiteVision AB
6194.9.94.86Sweden
AS39570Loopia AB
6104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
637.19.194.80Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
688.80.0.132Stockholm, Stockholm County, Sweden
AS48579ELASTX AB
6194.9.94.85Sweden
AS39570Loopia AB
679.127.211.90Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
6104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
538--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T135830911DC04693F85F326DAB131676A22B2E118D7039884B6FE87199FC3E86DE3715E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Xm2RdpC/5gfhdyAYtjIDTU+KP+Ltuk4ATCk1XXsBlW26H7gbznl7lsx7WoU9Jwnb:2YdpC/5VD+KG42Wk1sBlW26H7gbznl7u

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83839:yKBIFRUHAIhGUOJDduSEBLQB7gDACMcUOKUCEkABCJZlkuQHwAHA8wJgIIYAoIKoIi8CHlgDFN1AUIqITgAAiYhGIuzJSQto

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffcf0f0f0000000
Perceptual Hash:c6e49bb3c52c20f5
Difference Hash:4965642666cd4173
Wavelet Hash:fffff2f0f2000030
Color Hash:#2d2fd2

Scan History

Scan history not available

Unable to load historical scan data