ScanMalware.com

Security Scan Report: login.norton.com

Redirected to:
https://login.norton.com/sso/embedded/update
Site favicon
Submitted: Jan 4, 2026, 6:43:09 PMCompleted: Jan 4, 2026, 6:44:29 PMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 3 countries across 13 domains to perform 54 HTTP transactions. The main domain is login.norton.com and was registered NaN years ago.

Submitted URL: https://login.norton.com

Effective URL: https://login.norton.com/sso/embedded/updateRedirected

The Cisco Umbrella rank of the primary domain is #6,259 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 92%

2
Risk Score

Legitimate Norton login page; minor UI issue but low overall risk.

Risk Factors
Hidden password field not visible to users
Safety Factors
Well‑established domain (registered 1991)
Official brand domain matches page title and content
Top 10k Cisco Umbrella ranking indicates high legitimacy
No malicious Indicators of Compromise matches found
Secure HTTPS connection (implied by official login page)
Domain age information unavailable

Details

Page Title

Sign In - Official Site | Norton Account Sign In & Set Up

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(52%)

Domain Information

The domain name 'login.norton.com' uses the commercial generic top-level domain (.com), featuring subdomain 'login'. The registrable portion 'norton' spans 6 characters containing 2 vowels alongside 4 consonants. Segmentation suggests 1 word: norton. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://login.norton.com

Page Load Overview

4.15s
Total Load Time
51
HTTP Requests
15
Domains
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:EN
Text Length:4,921 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network52% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
52%
technology software
37%
e-commerce shopping
29%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
363.140.62.120Germany
AS8075
323.52.180.33Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
318.66.102.101Ireland
AS396982
334.8.9.231Unknown
AS13335
363.140.62.236United States
AS16509AMAZON-02
352.211.241.227Dublin, Leinster, Ireland
AS16509AMAZON-02
3172.66.150.204UnknownUnknown
3104.17.209.240UnknownUnknown
318.66.102.80United States
AS16509AMAZON-02
352.211.113.187UnknownUnknown
5117--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13FB3810168F19C6600E754EC26E76615ADA9C60B9104CD54BE6C4FE80FB7E7ACE3B32D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:E+YwXSu/TaPswKnOAHbMwydWDpjSn8sofZbbmb8C4ZIe7t89eBkXpighn0LjW:zbx+8C4ZIQEY8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:107734:AgVRAQCAJIERbBkRJBApKYkg00rKSgCSMSoKBCNYvKlglkGcAUIHsFynwCAZhS6gGYIBFlAseIUIohIIAEkSINi6IgggUhAW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9898f9f8f8f9f8f8
Perceptual Hash:d93c387a55c2e2c3
Difference Hash:3332032002010102
Wavelet Hash:9888f8f808080808
Color Hash:#53ac56

Other Hashes

Crop Resistant:3332032002010102

Scan History

Scan history not available

Unable to load historical scan data