Security Scan Report: norgesstatsbaner.nu

Redirected to:
https://www.vy.no/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 4 countries across 14 domains to perform 192 HTTP transactions. The main domain is norgesstatsbaner.nu.

Submitted URL: https://norgesstatsbaner.nu

Effective URL:
https://www.vy.no/
Redirected

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Old domain norgesstatsbaner.nu redirects to the official Vy site (www.vy.no). Final page is genuine Vy content with no credential/payment forms and no threat-intel, YARA or IDS hits — not impersonation.

Safety Factors (5)
Redirect terminates on the official Vy domain (www.vy.no), the legitimate brand owner
Self-branding: page title/meta match the final domain's brand (Vy)
No credential, payment or disguised-password fields on the page
No Indicators of Compromise, YARA, IDS, or Safe Browsing hits
Content is a full travel service portal (routes, traffic notices, news, loyalty program), consistent with a real transport operator
Domain age information unavailable

Details

Page Title

Vy | Tog | Buss | Taxi | Bestill din reise på vy.no

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'norgesstatsbaner.nu' is registered while skipping any subdomain. The second-level label 'norgesstatsbaner' is 16 characters long holding five vowels versus eleven consonants. Segmentation suggests 5 words: nor, ges, stats, bane, r. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://norgesstatsbaner.nu

Page Load Overview

26.69s
Total Load Time
10.9 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nb
Text Length:5,331 chars
Detector Agreement:100%
Language mismatch: Declared as nb but detected as no

Website Classification

Primary Category

news media journalism59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
59%
travel tourism
56%
government public service
51%
corporate
35%
education learning
33%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
865.8.131.97Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8194.9.94.86Sweden
AS39570Loopia AB
896.45.83.136United States
AS16552Tiggee LLC
8108.138.26.15Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
818.245.46.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
83.160.150.57Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
865.9.130.71Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8212.89.53.155Norway
AS2116Globalconnect As
8212.89.53.154Norway
AS2116Globalconnect As
8194.9.94.85Sweden
AS39570Loopia AB
19224--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BEA45BB87120A23D48279DA82728DE995279F10CFD2665CCF42EE76857E7FF1A007907

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:sjfUaAoVQ92hFqOdElKIIRdOEu6PParUQOkHF/aojrFsU4Trs4mnOzldk:8VK/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:456139:MZQAAIikiiKcX40Nu4iAMKACGcGIADEAsUSwF4oVGAogFgA4IbiqMDjEyAgQBuTEaUNBtMA9t2IAAQCKQBcAMB0AGLQQES1A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff81ffff97870000
Perceptual Hash:bee9413ecec1b086
Difference Hash:61691063652de149
Wavelet Hash:ff81ffff95810000
Color Hash:#e06c6c

Scan History

Scan history not available

Unable to load historical scan data