Security Scan Report: tfw.wales

Site favicon
Submitted: Completed: publiccompleted
This website contacted 96 IPs in 6 countries across 51 domains to perform 473 HTTP transactions. The main domain is tfw.wales and was registered 11 years ago.

Submitted URL: https://tfw.wales

The Cisco Umbrella rank of the primary domain is #461,914 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Official Transport for Wales site on its own long-established domain, with no credential or payment forms, no threat-intel hits and only routine analytics scripts. Legitimate.

Safety Factors (5)
Established 11-year-old domain matching the displayed brand (Transport for Wales)
No credential or payment collection on the page
No Indicators of Compromise, hunting rule, Safe Browsing or phishing/malware IDS alerts
Real operational content: service disruption notice, delay repay policy, journey planning
Third-party scripts all served from top-1M ranked hosts
Domain age information unavailable

Details

Page Title

Buy train tickets | Cheap rail tickets - No booking fee | TfW

Scan Type

public

Domain Name Analysis

Domain 'tfw.wales' uses the .wales top-level domain and has no subdomain. The second-level label 'tfw' is 3 characters long containing zero vowels alongside three consonants. Segmentation suggests 2 words: t, fw. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

> A Allupdates View updates 1 ~ Planajourney ¥ Tickets and fares ~ _Live timesand updates ~ Help and contact cymraeg @ We're woven through Christmas A thread connecting you to festive markets, fro...

Page Load Overview

1.58s
Total Load Time
7.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:35,005 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content82% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
82%
technology software
40%
travel tourism
34%
government public service
25%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9352.31.60.123Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
423.50.131.159Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
452.222.236.94Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
418.244.20.103Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
4104.20.46.197Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
423.45.103.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
4142.251.127.92Google · CDNUnited States
AS15169Google LLC
420.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
47396--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103D4C7B532F0619E034BC3A061E4EFA75AD189CBC9825484B0ECC7F02BD3E55EF66965

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:ibRHZjOU3AnoPWq6noPWq9noPWqLznoPWqWRl:ib3F3AjRl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:643741:GlHAk6KZcBApRBggipIQCIBh+FxYJCEQEIUeZlkBkEDGABLIUQRBCISCFWxC0ASUliCqBQKBoC2igC9ld+EgQgCwQAQlIIAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff2320407edfdfff
Perceptual Hash:a1678e9cd071ab47
Difference Hash:3ac7cf96943e3acb
Wavelet Hash:af00200048dfffff
Color Hash:07001038000

Scan History

Scan history not available

Unable to load historical scan data