Security Scan Report: gavleposten.se

Redirected to:
https://www.gavleposten.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 19 HTTP transactions. The main domain is gavleposten.se.

Submitted URL: https://gavleposten.se

Effective URL:
https://www.gavleposten.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Long-established (2008) self-branded Swedish local news/police-blotter site; no forms beyond a search box, no impersonation and no threat-intel, YARA or IDS hits. Only weak signals: unranked domain and a low-confidence ML label.

Risk Factors (2)
ML content classifier returned a non-trivial 'phishing/scam' label (40%) despite otherwise news-like content
Domain is not present in the Cisco Umbrella top 1M, so reputation is unverified
Safety Factors (5)
Domain age 6813 days (well-established, minimal age risk)
Self-branding matches the domain — no brand impersonation
No credential, login, or payment forms; no cross-origin form submission or credential exfiltration
No threat-intelligence, JavaScript-malware, kit-roster, or network IDS hits
Content reads as ordinary regional police-blotter news citing Polisen.se
Domain age information unavailable

Details

Page Title

Gävleposten.se – Nytt från Gävle – Dygnet runt

Scan Type

public

Domain Name Analysis

The domain 'gavleposten.se' uses the Swedish country-code top-level domain (.se). Count 11 characters in 'gavleposten' split between four vowels and seven consonants. It segments into four words: ga, v, le, posten. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gavleposten.se

Page Load Overview

4.49s
Total Load Time
392 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:3,436 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence
Type: dynamic
Method: structural

All Detected Categories

phishing/scam
40%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3217.208.53.228Sundsvall, Västernorrland County, Sweden
AS3301Telia Company AB
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2192.178.183.154Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2142.251.14.100Google · CDNUnited States
AS15169Google LLC
2192.178.183.155Google · CDNUnited States
AS15169Google LLC
2142.251.14.102Google · CDNUnited States
AS15169Google LLC
2142.251.14.138Google · CDNUnited States
AS15169Google LLC
2142.251.14.113Google · CDNUnited States
AS15169Google LLC
199--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E913297291AC4577760FC7EE9090B71DB8AF9A34DB4316E5B0FA71148B8CDB6049620E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:fW3Zdypa9CKdygnsqb6RKKguMmeWK4Tzqm/4uTOlNwXxoTizWHZJ+b0vLBIp:fQypMIgnsqb6RTguMmeH4Tzqm/4uTOlE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41676:YIzJEaKyQuglApyoixZoYwBZC0yBARKQgNgUIEShBsIgCiQw8UE0BAkk4AZ2gmBFSMEFRI4pEKCYkyLEYITAzzUoExctkMRA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c3c3c3c3c
Perceptual Hash:924c5c9696d2d3cb
Difference Hash:f8e8f8f8f8d8f8d8
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#6a2d86

Scan History

Scan history not available

Unable to load historical scan data