Security Scan Report: tpexpress.co.uk

Redirected to:
https://www.tpexpress.co.uk//
Site favicon
Submitted: Completed: publiccompleted
This website contacted 33 IPs in 4 countries across 21 domains to perform 196 HTTP transactions. The main domain is tpexpress.co.uk and was registered 25 years ago.

Submitted URL: https://tpexpress.co.uk

Effective URL:
https://www.tpexpress.co.uk//
Redirected

The Cisco Umbrella rank of the primary domain is #456,324 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

Official TransPennine Express train booking site on its own 25-year-old domain; self-branded, no credential or payment fields, no threat-intelligence, YARA or IDS hits.

Safety Factors (5)
Established 25-year-old domain consistent with the operating rail franchise brand
No credential or payment capture fields in the captured DOM
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
Third-party scripts served from ranked, well-known hosts (Google, Cloudflare, Usercentrics)
Content is coherent travel/booking material with legal/privacy policy references
Domain age information unavailable

Details

Page Title

Buy Train Tickets | Book Train Tickets | TransPennine Express

Scan Type

public

Domain Name Analysis

The domain 'tpexpress.co.uk' uses the United Kingdom country-code top-level domain (.co.uk). The second-level label 'tpexpress' is 9 characters long holding 2 vowels versus seven consonants. It segments into two words: tp, express. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tpexpress.co.uk

Page Load Overview

5.78s
Total Load Time
8.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:263,167 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism53% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
53%
adult content
49%
government public service
33%
documentation technical
30%
forum
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36143.204.181.81Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5143.204.181.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
513.224.83.116Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
551.200.22.182Aws · CLOUDCity of London, England, United Kingdom
AS16509Amazon.com, Inc.
534.149.254.14Google · CDNKansas City, Missouri, United States
AS396982Google LLC
523.67.128.30Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
5104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
534.102.170.124Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
19633--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FF355B42AE50CC15C4EF09CCAD7225A524BCD316D2A20698F96DC3F45B6FCBCD63BA58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:aDw3ZG+Wx+W5+WEbjgVoGBbjgVoGrYvfjvqkrSdu:aDw3U+Wx+W5+WNoGaoGr2fjvqkr5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1132720:JCKBEU/QBZKEJDMEOUwVygIAEEgSTWCFx4IBJFQSw9oLGECL6cAoQEQABnIIcYNBGUICMAehAE1MAqOPgDukjFlEKWK4KBQB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff3c8180007cf87
Perceptual Hash:b9c5b48659d83273
Difference Hash:28061a3169cf1f1f
Wavelet Hash:fff2c8180007cfc7
Color Hash:#79c8d2

Other Hashes

Crop Resistant:28061a3169cf1f1f

Scan History

Scan history not available

Unable to load historical scan data