Security Scan Report: xlmann.se

Redirected to:
https://xlmann.no/
Site favicon
Submitted: Sep 27, 2026, 9:30:31 PMCompleted: Sep 27, 2026, 9:31:44 PMpubliccompleted

This website contacted 59 IPs in 4 countries across 34 domains to perform 253 HTTP transactions. The main domain is xlmann.no and was registered 30 years ago.

Submitted URL: https://xlmann.se

Effective URL:

https://xlmann.no/
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Self-branded Norwegian plus-size menswear shop (XLmann AS) on its own domain; standard WooCommerce account forms, no impersonation, no Indicators of Compromise, no malware. Low risk.

Risk Factors (1)
Final destination domain xlmann.no has no published age/reputation and is unranked in Cisco Umbrella
Safety Factors (4)
Site declares its own brand name matching the served domain (no third-party impersonation)
No Indicators of Compromise, no YARA malware patterns, no IDS alerts
Credential forms are same-origin account forms on an e-commerce store, not cross-origin credential harvesting
Recognized legitimate third-party scripts (Bing, Matomo, Cookiebot, Clarity, Vipps checkout) rather than obfuscated exfiltration
Domain age information unavailable

Details

Page Title

Xlmann.no

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'xlmann.se' is registered. The second-level label 'xlmann' is 6 characters long with 1 vowel and five consonants. Tokenizing the label suggests two words: x, lmann. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xlmann.se

Page Load Overview

9.99s
Total Load Time
8.9 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:28%
Script:Latin
Direction:ltr

Detection Details

Text Length:21,902 chars
Detector Agreement:75%

Website Classification

Primary Category

e-commerce shopping88% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
88%
adult content
79%
technology software
79%
blog personal website
78%
corporate business
76%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21104.18.22.20Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4194.63.248.52Norway
AS12996Domeneshop AS
4104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4150.171.110.49Azure · CLOUDUnited States
AS8075Microsoft Corporation
423.36.162.212Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
413.226.244.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.151.119Google · CDNUnited States
AS15169Google LLC
465.9.130.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
42.16.204.82Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
25359--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T154159451AC51002FD4617CB635C2BF187DEAA1028B904866F43D9E603FF6D5EB0AF7A6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:LXOVzrgci7WB7zI7WIn7DyjoPMm7NUPPfTLm9boN7VcWqN979KvIpqqx7MKeA6qI:LXiA9MPXm9baEGWE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:893267:cGSwANFMIQAJCKIQoAXCYWyISqQqAgh6IiC2BmGJCAjoMkEQiHakxQIFCiskkjCqjYGEH8AAgsFQYAWCwQIgBBAkJVREhcD4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data