Security Scan Report: vsgp.se

Redirected to:
https://vsgp.se/login
Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Low Risk

Confidence: 75%

2
Risk Score

vsgp.se is an established (774-day) self-branded 'VSG företagsportal' with its own same-origin email/password login and Google/Microsoft SSO. No impersonation, exfiltration, IoC, YARA or IDS evidence — low risk.

Risk Factors (1)
Login form collects email and password on a domain with no Cisco Umbrella ranking (weak prior, not evidence of wrongdoing)
Safety Factors (5)
Established domain age (~2.1 years, registration 2024-08-26)
Self-branding: page title/meta 'VSG företagsportal' matches the vsgp.se domain — it does not claim to be another entity
Cross-origin credential analysis found no exfiltration and no cross-origin form submission
SSO buttons are standard 'sign in with' provider usage, explicitly not brand impersonation
No IoC, YARA, IDS, Safe Browsing or malicious-JS signals; page reads as an ordinary corporate portal login
Domain age information unavailable

Details

Page Title

VSG företagsportal

Scan Type

public

Domain Name Analysis

The domain 'vsgp.se' uses the Swedish country-code top-level domain (.se) and has no subdomain. The registrable portion 'vsgp' spans 4 characters with 0 vowels and four consonants. Word splitting yields two words: vs, gp. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://vsgp.se

Page Load Overview

11.06s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:39%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:228 chars
Detector Agreement:75%
Language mismatch: Declared as en but detected as sv

Website Classification

Primary Category

technology software64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
64%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15216.24.57.1United States
AS397273Render
9142.251.127.84Google · CDNUnited States
AS15169Google LLC
9104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
965.8.131.42Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9172.66.161.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
965.8.131.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
965.8.131.30Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
788--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15863F958B504523AAC278AD0EAC8B56CF512F183EE3694B5F18E0568EFC2FF20DD7645

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:D4yqQ1FMr9axdhnY3Zkg+WbQlG50rGV4xksc64Jysq7vuyiiPM/k:D4yL1FMr8fh4Zklwebx/c64Jysq7vxD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67941:AAkMZBmuApBBiwBISo2AmHCSYACAgLNr2AIQQUERxFtkgaQgDS2SmiSAuVgFQAyD0GEBawgBEAKyDMghUASxwlIBkBSaMzkF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffffffe7e7
Perceptual Hash:f3c866998c629967
Difference Hash:08280c2832324d4c
Wavelet Hash:ffe4e0f8f8d8c080
Color Hash:#865c2d

Other Hashes

Crop Resistant:08280c2832324d4c

Scan History

Scan history not available

Unable to load historical scan data