ScanMalware.com

Security Scan Report: nexstep.nu

Redirected to:
https://www.nexstep.nl/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3672e28e-38e8-4f24-b3bb-d1fa7f8e3015Domain and IP registration (RDAP)/api/v1/rdap/3672e28e-38e8-4f24-b3bb-d1fa7f8e3015How often this domain was scanned/api/v1/domain/stats/nexstep.nuScan history for this domain/api/v1/domain/history/nexstep.nu?limit=15
This website contacted 9 IPs in 2 countries across 8 domains to perform 80 HTTP transactions. The main domain is nexstep.nu.

Submitted URL: https://nexstep.nu

Effective URL:
https://www.nexstep.nl/
Redirected

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

Clean redirect from nexstep.nu to the organisation's own site nexstep.nl. Self-branded, no credential or payment forms, no threat-intel, YARA or IDS hits. No sign of phishing or impersonation.

Safety Factors (4)
No credential or payment collection of any kind.
Self-branded domain consistent with page content (no impersonation).
Threat intelligence, YARA, IDS and JS behavioural scans all returned clean.
Legitimate corporate/institutional content with verifiable contact details.
Domain age information unavailable

Details

Page Title

Home – Nexstep

Scan Type

public

Domain Name Analysis

The domain name 'nexstep.nu' uses the .nu country-code top-level domain. The core label 'nexstep' covers 7 characters containing 2 vowels alongside five consonants. Splitting it apart reveals 3 words: ne, x, step. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nexstep.nu

Page Load Overview

7.65s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:6,550 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1687.233.198.15Netherlands
AS15703TrueFullstaq B.V.
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
8142.251.14.95Google · CDNUnited States
AS15169Google LLC
8142.251.20.97Google · CDNUnited States
AS15169Google LLC
8104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.110.139Google · CDNUnited States
AS15169Google LLC
8216.239.34.36Google · CDNUnited States
AS15169Google LLC
8104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.110.101Google · CDNUnited States
AS15169Google LLC
809--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D183EA37514D447A125FC3DFB0E0B388D5AB9931DA2B0AAAB2FF005C5781EF0599363A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:yWA3ypZTWUqGj/0bYr+eShtgpxVjL9OEd2P1GtH9ZAsBlI0p+Op2bjJJCadf:aCKUqg0bYr+eWCjIEQP1GtdZAsBlI0p8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:80991:QV38ACMHVzoUAEDlUzB4AG3BEYCBIEInBCEIUQdICw5iyJClC62gxyGqJODhbYBApgAzQAHMRAOweghmDqh0IAEQm7VhMESI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00bf9fff3f1f3cf8
Perceptual Hash:8e3c532d79073c4b
Difference Hash:b5723467237ce9c9
Wavelet Hash:001f07bf1f1f3878
Color Hash:#2d8649

Other Hashes

Crop Resistant:b5723467237ce9c9,01112bb4b4332d01,643dc517f68d1ab6,45a12131c4c43772

Scan History

Scan history not available

Unable to load historical scan data