ScanMalware.com

Security Scan Report: my.nortonshoppingguarantee.com

Redirected to:
https://norton.buysafe.com/
Submitted: Apr 3, 2026, 6:34:59 PMCompleted: Apr 3, 2026, 6:36:41 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7b19190b-29d1-4b6a-8db7-e3825ca5e3f1Domain and IP registration (RDAP)/api/v1/rdap/7b19190b-29d1-4b6a-8db7-e3825ca5e3f1Certificate Transparency/api/v1/ct/norton.buysafe.comHow often this domain was scanned/api/v1/domain/stats/my.nortonshoppingguarantee.comScan history for this domain/api/v1/domain/history/my.nortonshoppingguarantee.com?limit=15

This website contacted 9 IPs in 3 countries across 38 domains to perform 172 HTTP transactions. The main domain is norton.buysafe.com and was registered 24 years ago.

Submitted URL: https://my.nortonshoppingguarantee.com

Effective URL:

https://norton.buysafe.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Site impersonates Norton brand on a non‑official domain but lacks credential collection; moderate risk.

Risk Factors
Brand impersonation (brand mismatch between Norton brand and domain)
Domain not listed in Cisco Umbrella top 1M (unranked)
Cross‑origin email form submissions to a different domain
Safety Factors
Domain age > 20 years (well‑established)
No malicious Indicators of Compromise detected
No password or payment fields collected
No JavaScript malware YARA matches
No network IDS alerts
Domain age information unavailable

Details

Page Title

For Merchants - Norton Shopping Guarantee

Scan Type

public

Domain Name Analysis

Domain 'my.nortonshoppingguarantee.com' uses the commercial generic top-level domain (.com) and includes subdomain 'my'. The core label 'nortonshoppingguarantee' covers 23 characters split between nine vowels and 14 consonants. Word splitting yields three words: norton, shopping, guarantee. Average segment length settles at 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://my.nortonshoppingguarantee.com

Page Load Overview

7.69s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,128 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping98% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
98%
technology software
66%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20150.171.28.10United States
AS8075Microsoft Corporation
19108.138.26.5Germany
AS29990Xandr Inc.
19104.17.24.14Switzerland
AS32934Facebook, Inc.
1963.150.152.100United States
AS209CenturyLink Communications, LLC
19104.16.141.209United States
AS13335Cloudflare, Inc.
1963.150.152.113United States
AS209CenturyLink Communications, LLC
1920.250.198.32Zurich, Zurich, Switzerland
AS8075Microsoft Corporation
1963.150.152.112United States
AS209CenturyLink Communications, LLC
19142.251.127.97United States
AS15169Google LLC
1729--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BB54D76239131415314F41CF925B3B1CA0C2E7CAE342A5E5F9F49379A6F9CE236E6398

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:m4OpCvUYiuZLWZLWZLKI++OjiMR7uXxzXiL8ZApRkvJB7:wuZLWZLWZLvOW5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:293934:QOlGLgJSgAxwQoCrdQepwdEJYXBLzkJBGQFAKoAUNBiQYjgSouQsxRNBAYoCQGYM0IBCAVIUBolWhUQItAiZ4EBhD0MNUoKj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0e0e3f0f0f071818
Perceptual Hash:93b34c3593c867cc
Difference Hash:dcecccc8d85ef551
Wavelet Hash:0e0f7f2f2f0f1818
Color Hash:#3a4278

Other Hashes

Crop Resistant:cbcbe0c1c0c0c8c7,e7e7e6a4e461e3a7,1838303878e1a48c,16402e06172b0005,dcecccc8d85ef451

Scan History

Scan history not available

Unable to load historical scan data