Security Scan Report: narscosmetics.se

Redirected to:
https://www.narscosmetics.eu/en
Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 15 domains to perform 103 HTTP transactions. The main domain is narscosmetics.se.

Submitted URL: https://narscosmetics.se

Effective URL:
https://www.narscosmetics.eu/en
Redirected

AI Security Verdict

Safe Website

Confidence: 72%

1
Risk Score

NARS Cosmetics storefront on the brand-named domain narscosmetics.eu (entry .se redirects there). Own-brand login forms post only to that domain; no phishing, IoC, YARA or exfiltration evidence. Caveat: age/rank of the final .eu domain is unpublished.

Safety Factors (4)
Self-branding detected: title/meta name 'narscosmetics' matches the domain
Account form submissions stay on the brand's own domain (legitimate SSO flow to narscosmetics.eu)
No credential or payment harvesting fields beyond the site's own login/registration
No Indicators of Compromise, YARA, IDS, or Safe Browsing hits
Domain age information unavailable

Details

Page Title

NARS Cosmetics | The Official Store | Makeup and Skincare

Scan Type

public

Domain Name Analysis

You're looking at domain 'narscosmetics.se' on the Swedish country-code top-level domain (.se) while skipping any subdomain. The registrable portion 'narscosmetics' spans 13 characters split between 4 vowels and 9 consonants. It segments into 3 words: nar, s, cosmetics. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://narscosmetics.se

Page Load Overview

3.60s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,989 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
e-commerce shopping
31%
adult content
30%
social_media
25%
forum
20%

Detected Features

Login Form
Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.18.16.85Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
45.22.145.16Aws · CLOUDGermany
AS16509Amazon.com, Inc.
418.172.112.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
43.161.82.31Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
43.161.82.20Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4107.20.197.109Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
418.66.138.159Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
434.49.182.152Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4142.251.157.4Google · CDNUnited States
AS15169Google LLC
434.8.30.44Google · CDNKansas City, Missouri, United States
AS396982Google LLC
10325--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12B063F6BA0BF467B053FB8F8F96783D2D0838743E7A337FAA05096A553591058D271B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

49152:9jv9bkVMmu9Fe8wkvnY/ifW829gR+VMm/IqM0ZzJGrqPRe2mZ6Z:9zl8AaP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3794236:GGIMaAkIUZAiRKQ4BCArYMImwiF6knypARELwOAx5ImHBhKgAB0WACSSqSyCHQiDAiEAEIAmBSHEEFACEIIwBWBYWUnEVsGF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data