ScanMalware.com

Security Scan Report: nordcura.se

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cef7f47b-f75c-4c47-8f6c-2e5106ce0ac0Domain and IP registration (RDAP)/api/v1/rdap/cef7f47b-f75c-4c47-8f6c-2e5106ce0ac0How often this domain was scanned/api/v1/domain/stats/nordcura.seScan history for this domain/api/v1/domain/history/nordcura.se?limit=15
This website contacted 38 IPs in 4 countries across 29 domains to perform 682 HTTP transactions. The main domain is nordcura.se and was registered 1 year ago.

Submitted URL: https://nordcura.se/products/neurorelax%E2%84%A2-pro-2-0?omnisendContactID=6a32b45488af9c90eff7fa8d&utm_campaign=campaign%3A+Extra+10%25+innan+Halloween-veckan+drar+ig%C3%A5ng+%286ad79e8bc49c92a4b5cc64aa%29&utm_medium=email&utm_source=omnisend

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Swedish Shopify storefront for its own 'Nordcura' brand selling a neck massager. No credential/payment harvesting, no impersonation, no threat-intel, hunting rule or IDS hits. Only minor concerns: unverified health claims and review figures.

Risk Factors (3)
Marketing/health-benefit claims for an EMS/TENS neck device (circulation, deep muscle activation) are unverified on-page
Displayed rating of 4.9/5 from 4,087 reviews is not independently verifiable from the page
Right-click context menu is blocked by JavaScript (anti-analysis, weak signal on its own)
Safety Factors (4)
Domain is 380 days old (established) and the page presents its own brand rather than impersonating another
No credential-harvesting or payment form on the page; checkout is a standard same-origin Shopify cart flow
No Indicators of Compromise, no hunting rule malware, no IDS alerts, no kit-roster match
No cross-origin credential exfiltration and no off-domain form actions
Domain age information unavailable

Details

Page Title

NeuroRelax™ Pro 2.0 – Nackmassage med TENS, EMS, Rödljus & Värme – Nordcura

Scan Type

public

Domain Name Analysis

Within the Swedish country-code top-level domain (.se), 'nordcura.se' is registered without a subdomain. The second-level label 'nordcura' is 8 characters long with three vowels and 5 consonants. Breaking it apart gives two words: nord, cura. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nordcura.se/products/neurorelax%E2%84%A2-pro-2-0?omnisendContactID=6a32b45488af9c90eff7fa8d&utm_campaign=campaign%3A+Extra+10%25+innan+Halloween-veckan+drar+ig%C3%A5ng+%286ad79e8bc49c92a4b5cc64aa%29&utm_medium=email&utm_source=omnisend

Page Load Overview

11.35s
Total Load Time
13.3 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:18,566 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing88% confidence
Type: spa
Method: ml+structural

All Detected Categories

download file sharing
88%
finance banking
83%
e-commerce shopping
81%
healthcare medical
73%
news media journalism
53%

Detected Features

Search
Products
OG: product
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5323.227.38.69Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1723.227.39.200Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1734.144.250.199Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1720.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
17104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17150.171.109.104Azure · CLOUDUnited States
AS8075Microsoft Corporation
1734.160.147.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1723.227.39.20Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1791.107.227.19Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
17172.64.151.126Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
68238--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F751861E1F12074204BA379BB9F37C4BB26A113D745CEE436DE93588F897A90D6328D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:STLcMF+mwqcPsU+GbpQ/d0dL/Xd2si/G3qbzZRdd0ZFe+F7ImZNgi76MIVOnGCQh:STLZwqF7i76P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1647262:BpIAAEFSHSgxYwlMdByPWRCVACBRJMCuwLDZzCSoAMIGICdvQEgJEABIACCT+mrbhmXB5hmT6CAAAUCDpJJYKkQamOIoDrMA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000d7cffffff1
Perceptual Hash:fc174790b8c74e38
Difference Hash:8e6b6736b6b60703
Wavelet Hash:000001d3cfdffff1
Color Hash:#a5c587

Other Hashes

Crop Resistant:8e6b6736b6b60703,0111093333310911,0361696161696505

Scan History

Scan history not available

Unable to load historical scan data