Security Scan Report: www.geon.se

Redirected to:
https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpages%2F...
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 5 domains to perform 68 HTTP transactions. The main domain is geon.se.

Submitted URL: https://www.geon.se

Effective URL:
https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpages%2F...
Redirected

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Genuine GitHub sign-in page reached via a cross-domain redirect from geon.se to github.com; brand claim matches the established destination domain and all forms post same-origin. No phishing or malware indicators.

Safety Factors (3)
Redirect terminates on the legitimate, highly-ranked github.com domain, so the brand claim is genuine, not impersonation.
Forms submit to the same origin the page is served from (github.com /session), consistent with a real authentication flow.
No Indicators of Compromise, hunting rule, IDS, or obfuscated/malicious JavaScript findings.
Domain age information unavailable

Details

Page Title

Sign in to GitHub · GitHub

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.geon.se' on the Swedish country-code top-level domain (.se); it also runs on subdomain 'www'. The second-level label 'geon' is 4 characters long split between two vowels and two consonants. Breaking it apart gives 1 word: geon. No strong language cues emerged from the frequency lists.

Screenshot

oO Sign in to GitHub Username or email address Password Forgot password? Sign in or G Continue with Google @ Continue with Apple New to GitHub? Create an account Sign in with a passkey Terms P...

Page Load Overview

3.37s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:924 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(96%)🇵🇹pt(4%)

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
59185.199.108.215Fastly · CDNUnited States
AS54113Fastly, Inc.
144.163.8.144Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
6185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
6185.199.111.215Fastly · CDNUnited States
AS54113Fastly, Inc.
6140.82.112.22United States
AS36459GitHub, Inc.
6185.199.109.153Fastly · CDNUnited States
AS54113Fastly, Inc.
6185.199.110.215Fastly · CDNUnited States
AS54113Fastly, Inc.
6185.199.109.215Fastly · CDNUnited States
AS54113Fastly, Inc.
3140.82.121.4Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
1140.82.121.5Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
6810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14843D5B1B034487D07179FC9F6B1FA1467A6E30BDE88A498B17E86B8ABC3D85914345C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:YH4l9YRT6Uu+dbT+zpFFN+S3ViyEqA6fUYH4mVOn4iG9z6JK:YeYROUbT+zpFFNT3ViyEqApG4msn4iGh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60573:iAFQaxQQJGXJkACCDRFBUQRVEEQiHsCMQBhgua4hAAwAcI0kRx+KwAogGmhUAmaClKROSQIDAhEDqLZoKEjIkDEhNhkigPiI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7efe7e7e7ffff42
Perceptual Hash:b333c9984c6666e6
Difference Hash:0c084d0c08000086
Wavelet Hash:20202020e7ffff00
Color Hash:07000000e00

Other Hashes

Crop Resistant:0c084d0c08000086

Scan History

Scan history not available

Unable to load historical scan data