Security Scan Report: norlycks.se

Redirected to:
https://www.norlyx.se/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 4 countries across 17 domains to perform 181 HTTP transactions. The main domain is norlycks.se.

Submitted URL: https://norlycks.se

Effective URL:
https://www.norlyx.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Swedish gun-safe retailer Nor-Lyx on self-branded norlyx.se. No credential/payment forms, no Indicators of Compromise, YARA or phishing IDS hits. Only weak signals: cross-domain redirect and a circular-redirect flag. Low risk.

Risk Factors (2)
Cross-domain redirect from norlycks.se to www.norlyx.se (ordinary domain-move pattern, not scored on its own)
Circular-redirect flag reported in the hop chain (moderate structural signal, no phishing indicators alongside it)
Safety Factors (5)
Self-branding: page presents Nor-Lyx, matching the serving domain
No credential or payment form on the page (authoritative verified counts)
No Indicators of Compromise, YARA, or kit-roster detections
Established e-commerce content with physical-address signal and Swedish gun-safe certification claims (SSF 3492)
Cross-origin scripts are standard, top-1M-ranked services (Cookiebot, Google Analytics, Tawk.to, Google Fonts) — no credential exfiltration
Domain age information unavailable

Details

Page Title

Vapenskåp godkända enligt SSF 3492 – det svenska originalet sedan 1979 | Nor-Lyx

Scan Type

public

Domain Name Analysis

Domain 'norlycks.se' uses the Swedish country-code top-level domain (.se) with no subdomain. Its registrable label 'norlycks' stretches across 8 characters holding one vowel versus 7 consonants. Splitting it apart reveals 3 words: nor, lyc, ks. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://norlycks.se

Page Load Overview

17.21s
Total Load Time
5.5 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:27,806 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software29% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
29%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1320.73.126.213Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
7194.9.94.86Sweden
AS39570Loopia AB
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
7142.251.110.95Google · CDNUnited States
AS15169Google LLC
7104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.73.234Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.139Google · CDNUnited States
AS15169Google LLC
7157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
7104.20.42.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.20.94Google · CDNUnited States
AS15169Google LLC
18125--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T162440A31B4E5313F0663C6F076A6EB6B68D2904AC7824440F6ED8B781FD6C466C7B16B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:n4nvI5ukH9ndl5p2Dr2wNGkkYQkSF2Dw+DvDWX1Vt6JtQkRkfCFoQBvP/2U:KK9ndl5+phJfi1Vt6JtQkRkfCFLvPt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:273393:QBTkQYXByBFhQRFyhC8chFE1B4ggEKIVgbACaIbjRAZIMGOAKApRgKrLZRSyugUIVkFwEkEoICAoiIEIkwGhioAigDBQGAij

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data