Security Scan Report: nordeagroupfunds.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 67 HTTP transactions. The main domain is nordeagroupfunds.com and was registered 1 week ago.

Submitted URL: https://nordeagroupfunds.com/

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

New (2-day-old) German-language finance information site with its own brand and no forms, IoCs or malware. Informational only, but unverified — treat cautiously and do not rely on it for investment decisions.

Risk Factors (3)
Financially themed site (Festgeld/Tagesgeld/ETF) on a 2-day-old domain with no established reputation
Name closely echoes an existing European bank brand (Nordea) though no official branding is displayed
Investment-advice content on a brand-new domain is a common precursor pattern for later-stage investment fraud
Safety Factors (5)
No forms of any kind; no credentials, passwords or payment data are collected
Explicit on-page disclaimers that no deposits, transfers or contracts can be made here and that no rates or partner banks are promised
Rich, coherent German-language content with Impressum page, FAQ and physical address listed
No Indicators of Compromise, no hunting rule malware patterns, no malicious JavaScript behaviour, no cross-origin credential exfiltration
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

nordeagroupfunds.com — Kapital. Klar gedacht.

Scan Type

public

Domain Name Analysis

The domain name 'nordeagroupfunds.com' uses the commercial generic top-level domain (.com). Count 16 characters in 'nordeagroupfunds' split between 6 vowels and 10 consonants. Splitting it apart reveals four words: nord, ea, group, funds. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nordeagroupfunds.com/

Page Load Overview

1.02s
Total Load Time
792 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:6,142 chars
Detector Agreement:80%

Website Classification

Primary Category

finance banking99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
99%
corporate business
69%
adult content
62%
government public service
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6795.129.234.10Russia
AS57724Ddos-guard Ltd
671--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T117537735A109DD3DFC2B5FC4A67EBE3D219E81AFC5498968D1ACCA244783C78B5539C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:6OCYkuEi3t1DUhJmnd6CntjB3JqBnjZdjX2oYNaMdIpG49LcivG:ki3t1DUhJmndntjB5ojZdjX2oYNXdeXG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:65196:iAAAgIOWTTFGABQBUcUqhRpXAAEhQSDBjSUCGqVQAQTuohABEhRikJCjw+CQjCG0YyAoEAACBQOJQAwXJA5ijQAKACIKxQE1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fffbd7f3b1ffff
Perceptual Hash:ee34112f341e6f61
Difference Hash:9c032725272373cc
Wavelet Hash:00fb91919191b9ff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data