Security Scan Report: id.novonordiskconnect.com

Redirected to: https://id.novonordiskconnect.com/Account/Login?ReturnUrl=%2Fwsfederation%3Fwa%3Dwsignin1.0%26wtrealm%3Durn%253asharepoint%26wctx%3Dhttps%253a%252f%252fnovonordiskconnect.com%252f_layouts%252f15%252fAuthenticate.aspx%253fSource%253d%25252F%26wreply%3Dhttps%253a%252f%252fnovonordiskconnect.com%252f_trust%252fdefault.aspx

Site favicon
Submitted: Feb 6, 2026, 7:30:51 AMCompleted: Feb 6, 2026, 7:32:12 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is id.novonordiskconnect.com and was registered NaN years ago.

Submitted URL: https://id.novonordiskconnect.com

Effective URL: https://id.novonordiskconnect.com/Account/Login?ReturnUrl=%2Fwsfederation%3Fwa%3Dwsignin1.0%26wtrealm%3Durn%253asharepoint%26wctx%3Dhttps%253a%252f%252fnovonordiskconnect.com%252f_layouts%252f15%252fAuthenticate.aspx%253fSource%253d%25252F%26wreply%3Dhttps%253a%252f%252fnovonordiskconnect.com%252f_trust%252fdefault.aspxRedirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing login page impersonating Novo Nordisk; do not enter credentials.

Risk Factors
Brand impersonation on an unusual, unranked domain
Credential harvesting form (email/username + password) on suspicious domain
Domain not listed in Cisco Umbrella top 1M (low reputation)
Domain age information unavailable

Details

Page Title

id.novonordiskconnect.com

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

unknown

(0%)

Domain Information

Domain 'id.novonordiskconnect.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'id'. The second-level label 'novonordiskconnect' is 18 characters long split between 6 vowels and twelve consonants. Breaking it apart gives five words: nov, on, or, disk, connect. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://id.novonordiskconnect.com

Page Load Overview

10.71s
Total Load Time
19
HTTP Requests
4
Domains
194 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:933 chars
Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19104.214.234.159Amsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
191--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T170048F77329A063986558498F05B83099F20B143F506C9BC79BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:9fQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszc2bMy8OldS:qhoC9JSqzzbs6o3Sj3gcrsY2eAI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184516:wlKFoAOLCi7Dslm4aAMEQDRGKkQYAMgwC0CAJEEPCuELvtBn7DGWLYGAIEEGEVoDAXbBBOIEEISlBmUHAhEchiUCcFMOAIIo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c7ffffffff
Perceptual Hash:b331cccccc633333
Difference Hash:00180c1400000000
Wavelet Hash:f0d0c0ccf0f0f0f0
Color Hash:#d2799b

Other Hashes

Crop Resistant:00180c1400000000

Scan History

Scan history not available

Unable to load historical scan data