Security Scan Report: www.norwegian.com

Site favicon
Submitted: Nov 27, 2025, 12:39:51 AMCompleted: Nov 27, 2025, 12:42:49 AMpubliccompleted
Loading additional data...

Summary

This website contacted 24 IPs in 3 countries across 8 domains to perform 49 HTTP transactions. The main domain is norwegian.com.

Submitted URL: https://www.norwegian.com/

The Cisco Umbrella rank of the primary domain is #219,653 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Site appears legitimate but low ranking and unknown age suggest minor risk.

Risk Factors
Low ranking for brand claim
Domain age unknown
Human verification page could be used for social engineering
Safety Factors
Final URL matches the official Norwegian airline domain
No malicious Indicators of Compromise matches found
No credential or payment forms detected
Domain age information unavailable

Details

Website Access Blocked

This website blocked our scanner, likely using AWS WAF, Cloudflare, or similar bot protection. The page may show differently for regular users.

Page Title

Just a moment...

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

travel tourism

(50%)

Domain Information

The domain name 'www.norwegian.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Count 9 characters in 'norwegian' split between 4 vowels and 5 consonants. Breaking it apart gives one word: norwegian. The median word length lands at 9 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.norwegian.com/

Page Load Overview

0.83s
Total Load Time
49
HTTP Requests
8
Domains
636 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-GB
Text Length:1,536 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism50% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

travel tourism
50%
corporate business
35%
government public service
34%
documentation technical
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32104.18.193.106United States
AS13335CLOUDFLARENET
6142.250.186.136United States
AS15169GOOGLE
3172.217.18.2United States
AS15169GOOGLE
3216.239.34.36United States
AS15169GOOGLE
220.50.88.244Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
213.107.246.44United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
2104.18.192.106United States
AS13335CLOUDFLARENET
220.50.88.238Amsterdam, North Holland, Netherlands
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
22606:4700::6812:c06aUnited States
AS13335CLOUDFLARENET
22620:1ec:46::44United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4924--

Detected Technologies1

Episerver/Optimizely CMSvCMS 12+ (.NET Core)
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T129A25CF7ABF41275961B839885B277283E2310BFD70782D4764D9A64DFC28CE851B48D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:PaTOAS5izXbE9+SDo2AV0p36vNpnwtT44QQuzbd10xQQ0/Z3OekPBfNgR:PeD9qGaA/ng45Qu/P//Z+ekPBfWR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23242:IDCkIAOAICqCCIMlCqAy0mQoIijRBhQQkABSANlUM1NqiEHVLEUCCZJnAoGGzUiRCMEEq5EYCEpgSGAGBEAaAHAECw1AJIRZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f3fe7c3c3c3cfff
Perceptual Hash:a40f9b0e263e0f9b
Difference Hash:6c7886a6a6a60d2e
Wavelet Hash:1f1ec2c2c3c3c7c3
Color Hash:#3a786c

Scan History

Scan history not available

Unable to load historical scan data