Security Scan Report: en.lillehammer.com

Site favicon
Submitted: Oct 1, 2026, 6:16:16 PMCompleted: Oct 1, 2026, 6:17:27 PMpubliccompleted

This website contacted 60 IPs in 7 countries across 33 domains to perform 159 HTTP transactions. The main domain is en.lillehammer.com and was registered 13 years ago.

Submitted URL: https://en.lillehammer.com/about-the-region/destinations/mountain-areas/gala

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Established 27-year-old Norwegian tourism site (Visit Lillehammer) with a genuine travel article. No credential or payment forms, no threat-intel, malware, or IDS hits. Legitimate.

Safety Factors (5)
Established domain with 27-year registration history
Self-branding consistent with domain (Visit Lillehammer)
No credential or payment forms anywhere on the page
Clean threat intelligence, YARA, and IDS results
Content is genuine regional tourism/travel information
Domain age information unavailable

Details

Page Title

Gålå | Visit Lillehammer

Scan Type

public

Domain Name Analysis

The domain 'en.lillehammer.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'en'. The second-level label 'lillehammer' is 11 characters long with four vowels and 7 consonants. Splitting it apart reveals 1 word: lillehammer. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://en.lillehammer.com/about-the-region/destinations/mountain-areas/gala

Page Load Overview

5.87s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:18,162 chars
Detector Agreement:60%

Website Classification

Primary Category

travel tourism59% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
59%
news/blog
20%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4123.205.47.180Akamai · CDNMilan, Lombardy, Italy
AS20940Akamai International B.V.
2172.66.145.160Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.9.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2150.171.110.54Azure · CLOUDUnited States
AS8075Microsoft Corporation
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
2142.251.110.102Google · CDNUnited States
AS15169Google LLC
223.194.190.151Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2188.166.63.236Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
2157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
218.66.102.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
15960--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0849531BC78E426405F24E875728739A1B7E306C6505BECF4CC9B798B67DA9AE2304D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:z0GULZzlboL2zIWr2fCzQY8fpuGr8mToEizElJnI7t4HDDkKJMmesAbw343TDMoF:BWoCzQYT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:374553:JJKAkRBmMCzIqokaAYIiHE2hwQBAWLgAWgvgI7IQBCEjNUgKHIAEMQGGVJCVSWQJOHgUmQhDNUggASEhhGBcEVUTEgAQRDiK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff072e04000000
Perceptual Hash:82dafac28ad2ca9e
Difference Hash:b53e34e8ecd9587f
Wavelet Hash:ffffbf3f0e000000
Color Hash:#2dd298

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data