Security Scan Report: www.normal.dk

Site favicon
Submitted: Oct 6, 2025, 11:24:32 AMCompleted: Oct 6, 2025, 11:25:54 AMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 2 countries across 6 domains to perform 12 HTTP transactions. The main domain is normal.dk and was registered NaN years ago.

Submitted URL: https://www.normal.dk/

AI Security Verdict

Safe Website

Confidence: 95%

1
Risk Score

The site appears legitimate with minimal risk; no phishing or scam indicators detected.

Safety Factors
Long registration history (since 1999)
Absence of malicious Indicators of Compromise
No collection of sensitive data
Legitimate brand name matches the domain
Domain age information unavailable

Details

Page Title

Normal

Scan Type

public

Language

🇩🇰

Danish

(80% confidence)

Domain Information

Domain 'www.normal.dk' uses the Danish country-code top-level domain (.dk) with subdomain 'www'. The registrable portion 'normal' spans 6 characters holding two vowels versus 4 consonants. Breaking it apart gives 1 word: normal. Average segment length settles at six characters. 'normal' most strongly signals Galician. You will also see it in Portuguese and Romanian contexts.

Screenshot

Security scan screenshot of https://www.normal.dk/

Page Load Overview

1.94s
Total Load Time
12
HTTP Requests
6
Domains
2 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:da
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:da
Text Length:7,564 chars
Detector Agreement:100%

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.66.162.7United States
AS13335CLOUDFLARENET
0184.24.77.154Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0184.24.77.156Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
02a02:26f0:3500:8::210:a58GermanyUnknown
0185.111.111.156GermanyUnknown
02a02:26f0:3500:8::210:a5dGermanyUnknown
0185.111.111.157GermanyUnknown
02606:4700:10::6814:2ae3GermanyUnknown
02400:52e0:1e00:2::1331:1GermanyUnknown
1216--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3F35470719B321F0F979BB05685E707AED188C249C425CEA8869B382EC6D1F5CBE177

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:MsHR4ypl0yNgWLUXqL5d9r6jUQMfrHTCz:MsHR4ypl0yNgWLUXqL5d9r6jUQMfrHTe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:161016:gyX1Ih8QEEQCMwMAAHBANExCACAIKqqgES6qAADpgAY6TNUJkeiCFhuMUQAAHIpTjQCYGiDJAgVL6kU8JiiJHGYGAABAgCjQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data