Security Scan Report: waygo.nu

Redirected to:
https://www.waygo.nu/
Site favicon
Submitted: Sep 25, 2026, 10:10:19 PMCompleted: Sep 25, 2026, 10:10:54 PMpubliccompleted

This website contacted 3 IPs in 2 countries across 5 domains to perform 62 HTTP transactions. The main domain is waygo.nu and was registered 13 years ago.

Submitted URL: https://waygo.nu

Effective URL:

https://www.waygo.nu/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Newly registered (≤1 day) Swedish transit live-map site with self-branding, no forms, no malware, and only a generic reputation link match. Age alone is a weak prior; nothing malicious in content. Moderate at most.

Risk Factors
Domain is ≤1 day old, so it has no established reputation
Safety Factors
Site displays its own brand (Waygo) matching its domain — not brand impersonation
No credential, login, or payment forms present anywhere on the page
No JavaScript malware / YARA matches, no network IDS alerts, no credential exfiltration
No obfuscated JS or cross-origin credential handling detected
Third-party domains used are map tiles (basemaps.cartocdn.com) — normal for a mapping app
Domain age information unavailable

Details

Page Title

Waygo – Kollektivtrafik i Stockholm på livekarta

Scan Type

public

Domain Name Analysis

The domain name 'waygo.nu' uses the .nu country-code top-level domain. The second-level label 'waygo' is 5 characters long containing two vowels alongside three consonants. Word splitting yields two words: way, go. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://waygo.nu

Page Load Overview

2.47s
Total Load Time
688 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:5,283 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service44% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
44%
technology software
42%
corporate
35%
adult content
30%
travel tourism
28%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22104.21.82.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
20146.75.122.132Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
20172.67.154.130Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
623--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FAD473957312863F62171258F2A2EF75B2EDE786DE857D54F26D00B233DEC180DAB242

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kb45X6JEvA4pq2+TET0rrbIG+/Dlr8OJJis7qKUUGcvqL7nHtyZEPdwH0A9uxpgt:k6SskgcW21YPMCYc3j3X3r3k3m3p+R7K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:655138:GUQPgEGA8ICAGeQZIQjQR42MCiwUxgbkAOA5EQggjGjqIAIpAlZEIkAB3gGAKBkG4XAVUkAGCnCJHhCBAqGBgPXIo0KAtJ8b

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dbff938393f3fbff
Perceptual Hash:ac3dc1e13c3c2cc7
Difference Hash:b242273727234304
Wavelet Hash:dbf281818181f1ff
Color Hash:#bf6240

Other Hashes

Crop Resistant:b242273727234304

Scan History

Scan history not available

Unable to load historical scan data