Security Scan Report: innotec.no

Redirected to:
https://www.innotec.no/
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 2 domains to perform 21 HTTP transactions. The main domain is innotec.no and was registered 14 years ago.

Submitted URL: https://innotec.no

Effective URL:
https://www.innotec.no/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Long-established self-branded Norwegian construction site, but its primary domain carries corroborated malware Indicators of Compromise and injected blockchain RPC/encoded JS, consistent with a compromised site serving malicious code. Avoid.

Risk Factors (5)
Content-malware Indicators of Compromise on the primary domain, corroborated by two independent feeds
Additional single-source malware ('unknown loader') reports on the same domain
Unexpected blockchain RPC connectivity from page scripts on a non-crypto business site
JavaScript encoding/decoding and eval usage consistent with injected/obfuscated payload tooling
Domain is not ranked in Cisco Umbrella top 1M despite long registration
Domain age information unavailable

Details

Page Title

::: INNOTEC :::

Scan Type

public

Domain Name Analysis

Within the Norwegian country-code top-level domain (.no), 'innotec.no' is registered. The second-level label 'innotec' is 7 characters long containing three vowels alongside 4 consonants. Word splitting yields three words: in, note, c. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Hovedside moss —Referanset_ Kontakt Innotec “Byag as Schick leokorb A leokor D leokorb F leokor KE leokorb K leokorb K hiorne leokorb K HVAWO. leokorb O leokorb Q leokorb S leokorb V leokorb W. l...

Page Load Overview

0.97s
Total Load Time
88 KB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,129 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7194.242.11.14Norway
AS34989ServeTheWorld AS
215.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
215.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
252.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
218--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13E738D28B9F427193C850850FA546FF36FC944B7260298A4758FB9BB9F8DFD8C027469

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ox5rGW3f161rfFwNNDOHEmSaUCVgpdGkvRS1YNC1Cf:oxFGcaEraU0gS0S1YI1+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:74861:CECkIO5SYgNCcGBGZAJpiUKDrhCFlHRLNwsRddgwiJxDIILACgxaGAAMlwhwBUCq4eBhYGB+MwOACCnMhUQGgOKATMgGklaE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:04243c243c3c3c3c
Perceptual Hash:9a333363647ccccc
Difference Hash:4d49696961697969
Wavelet Hash:042c3c3c3c3d7d3d
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data