ScanMalware.com

Security Scan Report: cff.nu

Redirected to:
https://www.cff.nu/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/217dc7db-094b-49d6-bf70-d9c105ad3e2dDomain and IP registration (RDAP)/api/v1/rdap/217dc7db-094b-49d6-bf70-d9c105ad3e2dHow often this domain was scanned/api/v1/domain/stats/cff.nuScan history for this domain/api/v1/domain/history/cff.nu?limit=15
This website contacted 3 IPs in 2 countries across 4 domains to perform 26 HTTP transactions. The main domain is cff.nu.

Submitted URL: https://cff.nu

Effective URL:
https://www.cff.nu/
Redirected

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate Dutch physiotherapy clinic site with self-consistent branding, contact details, and no credential, payment, malware, or threat-intelligence indicators.

Safety Factors (5)
Self-branding matches the domain
No password, login, or payment fields
No known malicious kits or Indicators of Compromise
No JavaScript credential exfiltration or cross-origin credential submission
Website category classified primarily as healthcare/medical
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'cff.nu' is registered with no subdomain. The core label 'cff' covers 3 characters containing zero vowels alongside 3 consonants. Splitting it apart reveals one word: cff. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cff.nu

Page Load Overview

1.39s
Total Load Time
598 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl
Text Length:10,269 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical56% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
56%
phishing/scam
20%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10199.34.229.100United States
AS27647Weebly, Inc.
8146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
832.188.197.229Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
263--

Detected Technologies6

JQueryv1.8.3
100%
Cloudflare Bot Management
55%
PHP
50%
MySQL
50%
Cloudflare
40%
Weebly
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E37373C0C1E96932436323D9F3949F8F367BC254EF16584492F65633BFCAE61236089A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kIRIOITIwIgIFKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SN7Go:i7GqEwqUxqJ20euCzArbwp1v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:76515:oFFMBfBQBSNgIJDiOAGQAggtCA8wCgGXEQhgTzBSHgBxEEsjgaUoEAt2CUhCJICiQpUM1QBAmNGmkgJgJcoPgAAozWICIK3Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfdfdfdfcfdfcfcf
Perceptual Hash:b8cc9a936d29cc33
Difference Hash:b0b4b5b6b6b5bdbd
Wavelet Hash:9e969981838f839f
Color Hash:#1f5393

Other Hashes

Crop Resistant:0909090908090909,92d289c9c9dbd9d3,108c888080800400

Scan History

Scan history not available

Unable to load historical scan data