Security Scan Report: xn--timrnytt-d0a.se

Redirected to:
https://timranytt.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 60 IPs in 4 countries across 37 domains to perform 316 HTTP transactions. The main domain is xn--timrnytt-d0a.se.

Submitted URL: https://xn--timrnytt-d0a.se

Effective URL:
https://timranytt.se/
Redirected

AI Security Verdict

Safe Website

Confidence: 80%

1
Risk Score

Local Timrå news site on its own matching domain; newsletter-only forms, no credentials, payments or threat-intel hits. Punycode-to-ASCII redirect is a benign same-brand move.

Safety Factors (5)
Self-branding: displayed brand 'TimråNytt' matches the destination domain timranytt.se
No credential or payment collection — newsletter email signup only, posting same-origin
No Indicators of Compromise, no JavaScript malware, no known phishing kit
Cross-origin form flow flagged as legitimate same-brand SSO/submission, not credential exfiltration
Consistent local-news content structure (headlines, sections for sport/trafik/evenemang, contact page)
Domain age information unavailable

Details

Page Title

TimråNytt - Lokala nyheter från Timrå kommun

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'xn--timrnytt-d0a.se' is registered with no subdomain. The core label 'xn--timrnytt-d0a' covers 16 characters holding 2 vowels versus 10 consonants, plus 1 digit and 3 hyphens. Word splitting yields eight words: xn, tim, r, ny, tt, d, 0, a. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--timrnytt-d0a.se

Page Load Overview

3.93s
Total Load Time
5.7 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:7,681 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service66% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
66%
education learning
61%
news media journalism
60%
healthcare medical
60%
blog personal website
59%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21216.150.1.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5194.9.94.85Sweden
AS39570Loopia AB
5104.16.79.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
5104.20.32.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.181.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
31660--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC843A39E005CD5DF4172DAEA63EAE3D649DC2AACAC2CDDDE3ECD49642468341B52DC0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:zjXXoPsfa5U3MzJeTlsLQNjXXoPs/MXoQ:zjXXYsiK3MzJqjXXYs/MXJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:372184:5qIsA4AQgAyAAglIQGTBNPAANwgBEkCqGIz4noKGhPFWgCMcIAYEhAQlOQCLZFBPgERBQIB4FkRXUUYgIDQYAAUQkIjEgWF4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data