Security Scan Report: nordeainvest.dk

Redirected to:
https://www.nordeafunds.com/da
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 7 domains to perform 52 HTTP transactions. The main domain is nordeainvest.dk and was registered 26 years ago.

Submitted URL: https://nordeainvest.dk

Effective URL:
https://www.nordeafunds.com/da
Redirected

AI Security Verdict

Safe Website

Confidence: 85%

1
Risk Score

Legitimate Nordea Invest fund site: nordeainvest.dk redirects to the official nordeafunds.com, content matches the brand, and there are no credential/payment forms or threat-intel hits.

Safety Factors (4)
Content is authentic Nordea Invest fund information served on the brand's own corporate domain after a single redirect
No credential, login or payment forms; only same-origin site-search forms
No Indicators of Compromise, hunting rule, kit-roster or IDS findings
Standard consent-management and CDN scripts from well-ranked providers
Domain age information unavailable

Details

Page Title

Nordea Invest | Nordea Invest

Scan Type

public

Domain Name Analysis

Domain 'nordeainvest.dk' uses the Danish country-code top-level domain (.dk) while skipping any subdomain. Its registrable label 'nordeainvest' stretches across 12 characters with 5 vowels and seven consonants. Breaking it apart gives three words: nord, ea, invest. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Nordea ‘Sadan bruger vi cookies i Nordea Nar du besager Nordeas websites, bruger vi cookies ~ vores egne men ogsa fra tredjeparter. Vibehandler altid dine data med omhu, og du bestemmer, hvad du vil...

Page Load Overview

1.91s
Total Load Time
4.2 MB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da
Text Length:8,614 chars
Detector Agreement:60%

Website Classification

Primary Category

finance banking70% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
70%
corporate business
31%
news/blog
20%
forum
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12104.18.21.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
45.56.144.4Nærum, Capital Region, Denmark
AS31027GlobalConnect A/S
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4143.204.181.43Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.32.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.20.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4143.204.181.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5211--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C534F49739A0232EEAD3C758EB627A947515989FFD3308DCF14D43784BCABE18C0564A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:CoLEYnp4y4+lib81ccA9iSt1UjjE/X0WansTJcY3JhucIGsMRgqLM1J+kSC5V74M:h4+QXYnwM/mXIYTyVN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:244792:QiBEQEuMILDJBhmZCSQQCFJupFBGaYoi+gGAgqqyABLlCCSKByiBAgAoMKAGRJVhRghqyPhEiNAIiEB2GAFgAhc7MhNQFBWw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff01050501000cff
Perceptual Hash:9026dd49e692f64d
Difference Hash:52fbbdedabbad9f9
Wavelet Hash:ff0b070503030fff
Color Hash:0a003000180

Scan History

Scan history not available

Unable to load historical scan data