Security Report: www.guardian.co.uk - Analysis

Summary

This website contacted 12 IPs in 5 countries across 13 domains to perform 2 HTTP transactions. The main domain is theguardian.com and was registered 18 years ago.

Submitted URL: http://www.guardian.co.uk/world/feedarticle/8453323

Effective URL: https://www.theguardian.com/info/2015/dec/09/removed-news-agency-feed-articleRedirected

The Cisco Umbrella rank of the primary domain is #157,544 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 85%

Risk Score

The page is a legitimate news article; the only concern is a single unverified malicious onion link, resulting in a moderate risk rating.

Risk Factors

External malicious link (onion domain) flagged by threat intel

Unverified single‑source IoC

Safety Factors

Established, well‑known news brand (The Guardian)

Article content with no credential collection

No forms harvesting credentials or payments

No JavaScript malware or credential exfiltration

Domain age information unavailable

Details

Page Title

Removed: news agency feed article | Information | The Guardian

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

5.11s

Total Load Time

146

HTTP Requests

Domains

1.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:5,727 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism81% confidence

Type: spa

Method: ml+structural

All Detected Categories

news media journalism

81%

social media network

46%

adult content

42%

news/blog

35%

corporate

35%

Detected Features

Payment

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	146.75.121.111Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
12	108.133.3.213Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
12	185.173.162.84	Naaldwijk, South Holland, Netherlands	AS49981WorldStream B.V.
12	52.50.44.105Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
12	99.84.152.57Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
12	37.187.82.189	France	AS16276OVH SAS
12	185.173.162.82	Naaldwijk, South Holland, Netherlands	AS49981WorldStream B.V.
12	185.173.162.83	Naaldwijk, South Holland, Netherlands	AS49981WorldStream B.V.
12	185.173.162.81	Naaldwijk, South Holland, Netherlands	AS49981WorldStream B.V.
12	185.173.162.80	Naaldwijk, South Holland, Netherlands	AS49981WorldStream B.V.
146	12	-	-

Page Statistics

146

Requests

Unique Domains

1.3 MB

Total Size

Detected Technologies2

Open-Graph-Protocolvarticle

100%

Index-Of

75%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CD342A324071233D803FF4E0EB86BF442127C727A29A23FAF5AD55649FC6A580D5769E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:DFkiTP1qg0qO/lqscgGmPpFLp2YSVfn7IMeOuM96381E7KWXsbXb4DYIwKGC29Ar:qiLs2tps

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:249663:mMD5YWEAAW4hihQSEEQEAwSDBgqEpOqBlTACGBwZVgETcTHUWDBAAEhbBCwJsMIujAEGEDDtLSDB9cLmEUacwhQpLCAhCQYJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff0000ffffffff

Perceptual Hash:b230eded12124ded

Difference Hash:06062dcd1c348000

Wavelet Hash:02020000c7ffff2f

Color Hash:#d2512d

Other Hashes

Crop Resistant:06062dcd1c348000,cbe3f27159d3abcc,0d2c132d2d2ddcdc

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.guardian.co.uk