Security Scan Report: norrmontage.nu

Redirected to:
https://shop.norrmontage.se/
Site favicon
Submitted: Oct 8, 2026, 12:20:20 PMCompleted: Oct 8, 2026, 12:21:20 PMpubliccompleted

This website contacted 17 IPs in 3 countries across 10 domains to perform 156 HTTP transactions. The main domain is shop.norrmontage.se and was registered 20 years ago.

Submitted URL: https://norrmontage.nu

Effective URL:

https://shop.norrmontage.se/
Redirected

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Swedish manufacturer Norrmontage's own site, redirecting within its own domain family. No forms collecting credentials/payment, no threat-intel, YARA or IDS hits. No impersonation found.

Safety Factors (3)
Page content describes a real industrial manufacturer of electrical distribution substations ('nätstationer') in Sweden, with a normal cookie-consent dialog
The redirect target shop.norrmontage.se shares the Norrmontage brand with the entry domain — an ordinary own-domain move/shop redirect
No credential harvesting, no brand impersonation and no malware or phishing infrastructure detected
Domain age information unavailable

Details

Page Title

Norrmontage AB | Nätstationer för eldistribution - Start

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'norrmontage.nu' is registered without a subdomain. Its registrable label 'norrmontage' stretches across 11 characters with 4 vowels and 7 consonants. Breaking it apart gives 3 words: nor, r, montage. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://norrmontage.nu

Page Load Overview

6.97s
Total Load Time
12.4 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:SV
Text Length:1,915 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical71% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
71%
blog personal website
26%
government public service
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12192.165.129.143Gävle, Gävleborg County, Sweden
AS204302Monitor ERP System AB
9194.9.94.85Sweden
AS39570Loopia AB
9104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
9192.178.183.97Google · CDNUnited States
AS15169Google LLC
918.66.122.48Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9192.178.183.95Google · CDNUnited States
AS15169Google LLC
918.198.145.12Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
9216.239.32.36Google · CDNUnited States
AS15169Google LLC
15617--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191233B0299AD2C3B415700D9F0B5B74470AF8A32F3D69469B27F42481FC6EC2DEA7769

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dHUQPLSPjYm4Nr2rk1E3gKdMsCJIGYrX1B0Lw9Jn:dZmjYD4N+Lw9h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:45796:JGZNsJHHAAfYS2ERMwmpCUGUsaONjhnBACAMBwcJCCOeJoWDNBHBBKEVDATBsAJAjESEQS4gUUFMmmAjjgEOoJbGImYSEwaA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff100000043c3c3c
Perceptual Hash:9229ceceb1bcc338
Difference Hash:29f4949cdcf878f8
Wavelet Hash:ff5c00000c7e7e7e
Color Hash:#ac7a53

Scan History

Scan history not available

Unable to load historical scan data