Security Scan Report: nfoto.no

Submitted: Nov 20, 2025, 5:52:10 PMCompleted: Nov 20, 2025, 5:55:19 PMpubliccompleted
Loading additional data...

Summary

This website contacted 168 IPs in 6 countries across 36 domains to perform 231 HTTP transactions. The main domain is nfoto.no.

Submitted URL: https://nfoto.no/dorskilt/?utm_source=nfoto.no&utm_campaign=6ffaba7dae-Nyhetsbrev_COPY_01&utm_medium=email&utm_term=0_-eec99c5cf4-4832893&mc_cid=6ffaba7dae&mc_eid=UNIQID

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

The site shows typical e‑commerce content with no malicious indicators, but its unranked status and unknown age suggest a low‑risk caution.

Risk Factors
Domain is not listed in the Cisco Umbrella top 1 M (unranked)
Domain age could not be determined (unknown registration date)
Safety Factors
No credential‑harvesting or payment collection forms
No brand impersonation detected
No suspicious external links or redirects
Domain age information unavailable

Details

Page Title

Dørskilt: Gjør Inngangspartiet Hyggelig og Personlig

Scan Type

public

Language

🇳🇴

Norwegian

(51% confidence)

Category

blog personal website

(45%)

Domain Information

The domain name 'nfoto.no' uses the Norwegian country-code top-level domain (.no) and has no subdomain. The core label 'nfoto' covers 5 characters with 2 vowels and 3 consonants. Tokenizing the label suggests 2 words: n, foto. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nfoto.no/dorskilt/?utm_source=nfoto.no&utm_campaign=6ffaba7dae-Nyhetsbrev_COPY_01&utm_medium=email&utm_term=0_-eec99c5cf4-4832893&mc_cid=6ffaba7dae&mc_eid=UNIQID

Page Load Overview

6.56s
Total Load Time
231
HTTP Requests
36
Domains
4.1 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Language Code:no
Detection Confidence:51%
Script Type:Latin
HTML Lang Attribute:nb-NO
Text Length:9,962 chars
Detector Agreement:100%
Language mismatch: Declared as nb but detected as no

Website Classification

Primary Category

blog personal website45% confidence
Type: static
Method: ml+structural

All Detected Categories

blog personal website
45%
entertainment media
41%
education learning
31%
government public service
29%
e-commerce shopping
28%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
102185.78.209.195Norway
AS202128Iteam 10 As
2154.192.35.117United States
AS16509AMAZON-02
163.171.211.37United States
AS16509AMAZON-02
15172.67.75.122United States
AS13335CLOUDFLARENET
73.5.0.34United States
AS14618AMAZON-AES
7188.114.96.3United States
AS13335CLOUDFLARENET
6151.106.10.28Strasbourg, Grand Est, France
AS29066velia.net Internetdienste GmbH
699.84.149.104United States
AS16509AMAZON-02
33.74.127.48Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
335.190.43.134United States
AS396982GOOGLE-CLOUD-PLATFORM
231168--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159F3E7E27D44343B205F29CE7196272DF6D38649DF42905063F8929E97F6E407BEAA0C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Z35JqE5427wXp4ScGaE1ZXpyScnXzgwXp0Scj8i+MAgwXxXp/ScqqlABXpsScM7L:ZZ42Klr1zfwgYhv67IWPSkGQgKYG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:159227:DkAU4fIMyZoMYAgULBQCARR6qiYUphLEEpAS6GRGSjMqAwiLbTFHgAKcwAAAA4TBiAKTARpqxD2AAEawCYI3GcKBKFhoBQoo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data