Security Scan Report: vasterasposten.se

Redirected to:
https://www.vasterasposten.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 19 HTTP transactions. The main domain is vasterasposten.se.

Submitted URL: https://vasterasposten.se

Effective URL:
https://www.vasterasposten.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

3
Risk Score

Site appears to be a Swedish local news aggregator with an 18-year-old domain, self-branded, no credential forms. ML classifier flagged phishing with low confidence, but no concrete malicious signals found.

Risk Factors (1)
ML-based classifier flagged the site as 'phishing scam' with 54% confidence
Safety Factors (5)
Domain age 6813 days (18 years) and well-established
Self-branding detected: title matches domain, no impersonation of a different entity
No credential or payment forms; only a search form with same-origin action
No Indicators of Compromise matches, no YARA malware patterns, no network IDS alerts
No cross-origin credential exfiltration detected
Domain age information unavailable

Details

Page Title

Västeråsposten.se – Nytt från Västerås – Dygnet runt

Scan Type

public

Domain Name Analysis

The domain 'vasterasposten.se' uses the Swedish country-code top-level domain (.se) with no subdomain. Its registrable label 'vasterasposten' stretches across 14 characters containing five vowels alongside nine consonants. Breaking it apart gives 3 words: vaster, as, posten. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vasterasposten.se

Page Load Overview

3.90s
Total Load Time
392 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:3,683 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam54% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
54%
blog personal website
45%
adult content
44%
government public service
35%
news media journalism
30%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3217.208.53.228Sundsvall, Västernorrland County, Sweden
AS3301Telia Company AB
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.110.154Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.250.154.139Google · CDNUnited States
AS15169Google LLC
2142.251.110.155Google · CDNUnited States
AS15169Google LLC
2142.250.154.113Google · CDNUnited States
AS15169Google LLC
2142.250.154.101Google · CDNUnited States
AS15169Google LLC
2142.250.154.100Google · CDNUnited States
AS15169Google LLC
199--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T152132A3290BC4477395FD79EA090732DECAE9A30DB4359E5B0FA20549B8DEF6049721A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:tW7Zdypa9y5y6NdIphtSEoy6UEectejNEhJKaX8rEteawdPDJ+b0vLBap:tkypny6NdIpnSEoy6UEeaejNEhJKaX8C

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41840:BahGQgBVBCRECKAHhoCggBGIUwARQh4GCk5CNocErMCILsVFuRiGMC1UBEgmFigFEVFZJgI05g5QjJAE4gBIABFABQwFQUgh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c3c3c3c3c
Perceptual Hash:926d1c9e92d2d3c9
Difference Hash:f8e8d8e8d8f8e8f8
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#2d8649

Scan History

Scan history not available

Unable to load historical scan data