ScanMalware.com

Security Scan Report: northones.se

Redirected to:
https://northones.com/en-de
Site favicon
Submitted: Sep 24, 2026, 10:40:14 PMCompleted: Sep 24, 2026, 10:41:32 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7b89f6cd-7621-4040-8f9d-52bf276a3d48Domain and IP registration (RDAP)/api/v1/rdap/7b89f6cd-7621-4040-8f9d-52bf276a3d48Certificate Transparency/api/v1/ct/northones.comHow often this domain was scanned/api/v1/domain/stats/northones.seScan history for this domain/api/v1/domain/history/northones.se?limit=15

This website contacted 46 IPs in 4 countries across 41 domains to perform 423 HTTP transactions. The main domain is northones.com and was registered 21 years ago.

Submitted URL: https://northones.se

Effective URL:

https://northones.com/en-de
Redirected

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Self-branded Shopify phone-case store (North Ones) with standard cart/search/newsletter forms, no credential or payment capture, and no Indicators of Compromise, YARA, or Safe Browsing hits. Generic .biz DNS IDS tags and eval usage are weak signals only.

Risk Factors (3)
Two HIGH-severity IDS alerts are generic 'Observed DNS Query to .biz TLD' reputation/traffic-class signals, not content-malware evidence, and do not establish a phishing or malware payload
JavaScript uses eval() (5 calls) and blocks DevTools/right-click — weak anti-analysis signal, common on commercial Shopify sites with third-party app scripts, and unaccompanied by any network sink or credential handling
Entry domain reputation (northones.se) does not transfer to the final domain northones.com, whose ranking is unknown
Safety Factors (5)
Self-branding confirmed: title/meta/OG all use 'North Ones', matching the domain — no impersonation of a third-party brand
No credential or payment capture fields on the page; checkout is standard Shopify /en-de/cart
Content is consistent with a real direct-to-consumer e-commerce business (product catalog, terms & conditions, Sweden-based shipping messaging, copyright notice)
No threat-intelligence matches against the page or its loaded assets
ML classifier's 'gambling betting 67%' label is contradicted by the actual page content (phone-case retail) and is treated as a misclassification
Domain age information unavailable

Details

Page Title

Phone Cases. Nordic Design - Inspired by Nature – North Ones

Scan Type

public

Domain Name Analysis

The domain name 'northones.se' uses the Swedish country-code top-level domain (.se) with no subdomain. The second-level label 'northones' is 9 characters long with three vowels and 6 consonants. Tokenizing the label suggests two words: north, ones. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://northones.se

Page Load Overview

20.55s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,504 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting67% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting
67%
adult content
47%
real estate property
47%
e-commerce shopping
46%
government public service
39%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1823.227.38.32Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
923.227.38.65Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
923.227.39.200Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
918.66.102.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9104.26.14.69Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
934.149.60.135Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9172.67.72.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.67.217.95Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
923.227.39.20Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
9146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
42346--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19EA2389B761118340483412FB8AF7BC83636500B68618870F9BCC5699FBCDCE51A7FAE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:DJdkFBm6cp7sbiioGomzpYteLaeZe54eAQqeSUeHRm1gZM/sz8lY51hyY8vG3Y3b:DJdkFBFiioLmz6teLaeZe54eAQqeSUe8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23230:IICjTowggOATFUqALLAOxFsFAAxxEGWywXCvp5Agb0CCaQKQwADECPYdAAdxybAISQIJkCCHKQGA5w3IiEDBJiuUCDjgCAC3

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff002849cdcdcfce
Perceptual Hash:b3ceb1b2d4a0b18e
Difference Hash:0c63d38b99999998
Wavelet Hash:ff002049c9cdcfce
Color Hash:#bf9540

Other Hashes

Crop Resistant:0c63d38b99999998,fee0a0a0a0a1b280,20047071700c2063,ccd4c40292929292

Scan History

Scan history not available

Unable to load historical scan data