ScanMalware.com

Security Scan Report: nordlayer-vpn.com

Submitted: Sep 15, 2026, 9:47:33 PMCompleted: Sep 15, 2026, 9:49:16 PMpubliccompleted

Summary

This website contacted 69 IPs in 9 countries across 47 domains to perform 2 HTTP transactions. The main domain is nordlayer-vpn.com and was registered 26 years ago.

Submitted URL: https://nordlayer-vpn.com

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unranked domain carrying a malware threat-intel hit and hosting an illegal Indonesian slot-gambling site built on a copied Samsung product template; avoid interaction.

Risk Factors
Primary domain carries a single-source malware (bumblebee) threat-intel match
Illegal online gambling / slot-machine content targeting Indonesian users
Stolen Samsung site template and Samsung SSO form actions on an unrelated domain
Confusing redirect chain with 4 cross-domain hops
Domain name 'nordlayer-vpn.com' mimics the NordLayer VPN brand while serving unrelated gambling content
Domain age information unavailable

Details

Page Title

Hotman77 x Hokage88 Cus, Simak Serunya Keseruan Event Kolaborasi Karakter Favorit

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

gambling betting

(70%)

Domain Information

Domain 'nordlayer-vpn.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'nordlayer-vpn' stretches across 13 characters holding 3 vowels versus nine consonants, plus one hyphen. Tokenizing the label suggests three words: nord, layer, vpn. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nordlayer-vpn.com

Page Load Overview

22.49s
Total Load Time
175
HTTP Requests
47
Domains
3.2 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id-ID
Text Length:49,309 chars
Detector Agreement:60%

Website Classification

Primary Category

gambling betting70% confidence
Type: webapp
Method: ml+structural

All Detected Categories

gambling betting
70%
entertainment media
57%
cryptocurrency blockchain
36%
adult content
26%
e-commerce
20%

Detected Features

Search
Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3923.52.180.53Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2172.217.117.4Google · CDNUnited States
AS15169Google LLC
213.35.58.104Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
292.123.112.69Akamai · CDNMilan, Lombardy, Italy
AS16625Akamai Technologies, Inc.
213.226.244.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2103.20.234.213Singapore, Singapore
AS395092Shock Hosting LLC
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
2142.251.150.119Google · CDNUnited States
AS15169Google LLC
2104.16.79.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17569--

Page Statistics

175
Requests
47
Unique Domains
4.6 MB
Total Size

Detected Technologies7

Java
50%
Cloudflare
50%
LiteSpeed
40%
HTTP/3
40%
jQuery
20%
cdnjs
20%
Adobe Experience Manager
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C112A6A385085D3D33C0A28DFBD9B000E2DB55AF9E44EC92B569492B1FDC7928037F99

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Fqns/xnsUnsw2yt4B4m4e4/4W4OUprYgPJfj:FdtUbhYNYCgPJfj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9445:wDtGyoslosMCrpCQsLgWJBSGKYASEIBEIicpiSCIEoBRJexQIBFA5GiGAABSKE0AkIVIVBBWAIFzCZQGQ0SFZ0QgYIBRLRgg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff383818182000
Perceptual Hash:c899b2b684a3d9d9
Difference Hash:0d33f371717149c1
Wavelet Hash:fffff83918182101
Color Hash:#d2c22d

Other Hashes

Crop Resistant:cbcbcbe0c3c0c8c6,f8787879fcb4f4f8,0d33f371717149c1

Scan History

Scan history not available

Unable to load historical scan data