Security Scan Report: xn--tgkartan-9za.se

Submitted: Completed: publiccompleted
This website contacted 25 IPs in 2 countries across 15 domains to perform 66 HTTP transactions. The main domain is xn--tgkartan-9za.se.

Submitted URL: https://xn--tgkartan-9za.se

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Swedish train-tracking site on a ~3-year-old self-branded domain with no forms, no credential harvesting, and no threat-intel, YARA, or IDS hits. Only a benign circular redirect noted — low risk.

Risk Factors (2)
Circular redirect chain (weak signal, could be misconfigured SSO/routing)
Unranked in Cisco Umbrella and low legitimacy score, but this reflects a niche regional service rather than malice
Safety Factors (5)
Domain operating ~2.9 years (well-established)
Self-branding matches the domain — no impersonation of a different entity
No credential or payment collection forms present
No threat-intel, malware, or network IDS matches
Uses reputable third-party infrastructure (Stripe, Google Fonts/Maps, jsdelivr, jQuery)
Domain age information unavailable

Details

Page Title

Tågkartan Live - Svensk tågtrafik i realtid

Scan Type

public

Domain Name Analysis

You're looking at domain 'xn--tgkartan-9za.se' on the Swedish country-code top-level domain (.se) without a subdomain. The second-level label 'xn--tgkartan-9za' is 16 characters long holding three vowels versus 9 consonants, along with one digit and 3 hyphens. It segments into six words: xn, tg, kart, an, 9, za. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--tgkartan-9za.se

Page Load Overview

5.24s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:841 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
59%
technology software
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.154Google · CDNUnited States
AS15169Google LLC
2162.55.94.24Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
2151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2172.217.118.4Google · CDNUnited States
AS15169Google LLC
2104.21.76.130Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.157Google · CDNUnited States
AS15169Google LLC
2142.251.14.132Google · CDNUnited States
AS15169Google LLC
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
6625--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF521975A9F004276163C1F2F8E0AE8E1D69C34BFA538585B2EC87611F8ACA78C4757C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Zl9p9SsE9TEiwOwgw2Yi4Kqht7tJ6rOuAeVt8YN3D3vxAnx/9Qp6:ZRTd2Yi4KkV76rUKtnN3rxAnx/iU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14073:ADQNIBshVQ2AkYGoI5B1OjJQIKCpIDNoQBBgAMgkQgKoTIUFAkiUNEysiArgBWDhMCYZLCSugQFogkQ2AqISACMzBldgilRU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:89012305336fddfb
Difference Hash:ccf232b2b2b2b2cc
Wavelet Hash:003c3c3cfcfc3c78
Color Hash:#783a55

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data