ScanMalware.com

Security Scan Report: nordcura.se

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/de23d9d4-295b-4edc-a44a-97725cda37bbDomain and IP registration (RDAP)/api/v1/rdap/de23d9d4-295b-4edc-a44a-97725cda37bbHow often this domain was scanned/api/v1/domain/stats/nordcura.seScan history for this domain/api/v1/domain/history/nordcura.se?limit=15
This website contacted 33 IPs in 4 countries across 29 domains to perform 629 HTTP transactions. The main domain is nordcura.se and was registered 1 year 1 month ago.

Submitted URL: https://nordcura.se/products/varmeleggings?omnisendContactID=6a32b45488af9c90eff7fa8d&utm_campaign=campaign%3A+M%C3%A5nadens+b%C3%A4sts%C3%A4ljare+%C3%A4r+h%C3%A4r+%286ae0edb0a732d792622d1993%29&utm_medium=email&utm_source=omnisend

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Swedish Shopify storefront for its own 'Nordcura' brand selling thermal leggings and support products; no credential/payment forms, no brand impersonation and no threat-intel, hunting rule or IDS hits. Unranked domain and pushy marketing only warrant a low-risk rating.

Risk Factors (3)
Domain is not ranked in Cisco Umbrella top 1M (weak prior only, not evidence of wrongdoing)
Right-click context menu is blocked by JavaScript (common on many commercial sites, weak signal)
Aggressive sales presentation: countdown sale banner, '5000+ nöjda kunder' trust badge and repeated review carousel
Safety Factors (5)
Consistent self-branding across title, meta and Open Graph tags matching the domain
No credential, password or payment fields present in the captured DOM
No cross-origin form submissions and no credential exfiltration detected
Established 390-day-old domain with a full product catalogue, contact form, returns information and order tracking
Email campaign link with UTM parameters indicates ordinary marketing traffic rather than a lure
Domain age information unavailable

Details

Page Title

Värmeleggings Dam Fleecefodrade – Termoleggings mot Kyla, Hög Midja – Nordcura

Scan Type

public

Domain Name Analysis

The domain 'nordcura.se' uses the Swedish country-code top-level domain (.se). The core label 'nordcura' covers 8 characters with 3 vowels and five consonants. Tokenizing the label suggests 2 words: nord, cura. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

FRI FRAKT INOM SVERIGE @Nordcura Startsida Hela sortimentet Nacke, axel & handled ~ Rygg & hållning v Massage & avslappning v Rödljusterapi & återhämtning v Fot, ben & rörelse v Skor & tofflor v Hud...

Page Load Overview

8.43s
Total Load Time
7.5 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:12,846 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical91% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
91%
adult content
49%
e-commerce shopping
48%
e-commerce
40%
documentation technical
39%

Detected Features

Search
Products
OG: product
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2123.227.38.69Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1923.227.39.200Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
1920.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
19104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
19116.203.4.250Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
19104.18.36.130Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1934.160.147.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1934.128.177.21Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1923.227.38.74Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
19157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
62933--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13B952A60E1B62435300F63BBABCA379476FD9247D341CEA8B59DE3440FC97AA0D6315A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:450MF+7TecPsU+Gbp8qduH07kPcEK2cpoI1WtS2zyishJ02rrq4THl25d2oL:45ITedYz2zye

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1921287:IcQ9DzBUjQICGQBBABBbwAjYcaAICBFiCIAgAyqEYAYIPOCESIYADDEBcgUxZR9xiCIAACkncAWYCxkhoVoFBTIClgSAnoJR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000cf8f8fcfff
Perceptual Hash:b847c738c7a76838
Difference Hash:8a23373e1c1e1e2d
Wavelet Hash:0000c38f8f8f8fff
Color Hash:N/A

Other Hashes

Crop Resistant:8a23373e1c1e1e2d,0111093333110911,0121612121616545,234d4d4535353571

Scan History

Scan history not available

Unable to load historical scan data