Security Scan Report: banknorweigan.se

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 4 countries across 9 domains to perform 23 HTTP transactions. The main domain is banknorweigan.se.

Submitted URL: https://banknorweigan.se

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Typosquatted lookalike of the bank Bank Norwegian, parked with matching loan/credit-card content. No forms or malware, but the deceptive bank hostname makes it unsafe to trust.

Risk Factors (4)
Typosquatted domain impersonating a real bank's name
Deceptive hostname registered to resemble an established financial brand
Financial-services advertising on a domain the brand does not own
Parked/for-sale lookalike bank domain — plausible precursor to phishing reuse
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'banknorweigan.se' is registered with no subdomain. Its registrable label 'banknorweigan' stretches across 13 characters containing 5 vowels alongside 8 consonants. Word splitting yields 4 words: bank, nor, wei, gan. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://banknorweigan.se

Page Load Overview

6.16s
Total Load Time
420 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:61%
Script:Latin
Direction:ltr

Detection Details

Text Length:153 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10199.191.50.184British Virgin Islands
AS40034Confluence Networks Inc
1104.18.24.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.237.89.114Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1195.181.175.40Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1172.67.179.219Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
185.9.205.255Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
194.237.80.97Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
1150.171.109.104Azure · CLOUDUnited States
AS8075Microsoft Corporation
1150.171.109.107Azure · CLOUDUnited States
AS8075Microsoft Corporation
2314--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FD23072443B1102015472069ADBE7F84BA669A27605CEC05FD8C5E40EFDEDA74EB7BF8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:OqLpZBsjBjrAyhtbgt4MiIO/5/9SLigkYz/YLuWeEteE9QczEGG:Oq3MMnY6TdsPi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47053:BIYF8pqwMCGkBGmGgVCZEdSSkUIVgXAYQMIiEBQNQxuAkgAtUwHEoANgFIYUKIVKIZExFOSBEggMQ8IVcWFGVQ1aDAMoMAMJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1800c300000000ff
Perceptual Hash:a4649b4b9a4ebaa6
Difference Hash:31969696b6b2b23b
Wavelet Hash:ffe7e7c3000000ff
Color Hash:#6ee06c

Scan History

Scan history not available

Unable to load historical scan data