Security Scan Report: fonkeling.nu

Redirected to:
https://fonkel.nu/
Submitted: Completed: publiccompleted
This website contacted 28 IPs in 3 countries across 16 domains to perform 101 HTTP transactions. The main domain is fonkeling.nu.

Submitted URL: https://fonkeling.nu

Effective URL:
https://fonkel.nu/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Dutch therapy practice site on fonkel.nu reached via a domain redirect. Self-branded, no credential or payment forms, no threat-intel, YARA or IDS hits. Only weak signal is the destination domain's unestablished reputation.

Risk Factors (1)
Destination domain fonkel.nu is unranked in Cisco Umbrella and its own domain age is not established (the reported 5-year age belongs to the entry redirect domain fonkeling.nu)
Safety Factors (4)
No credential, password or payment fields anywhere on the page
No Indicators of Compromise, no YARA malware, no IDS alerts, no known malicious kit
Content is consistent, coherent and professional (therapy practice description, missie/visie, contact details) with a matching self-brand
Only same-origin/same-entity form submission; cross-origin JS targets are mainstream analytics and cookie-consent scripts
Domain age information unavailable

Details

Page Title

Welkom bij Fonkel Therapie en Zingeving. Van Noor van Gulik.

Scan Type

public

Domain Name Analysis

The domain name 'fonkeling.nu' uses the .nu country-code top-level domain without a subdomain. The registrable portion 'fonkeling' spans 9 characters containing three vowels alongside six consonants. Segmentation suggests 3 words: fon, k, eling. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fonkeling.nu

Page Load Overview

6.74s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:9,151 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20199.16.173.84San Francisco, California, United States
AS2635Automattic, Inc
3199.16.172.1San Francisco, California, United States
AS2635Automattic, Inc
3104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.153.4Google · CDNUnited States
AS15169Google LLC
3142.251.156.119Google · CDNUnited States
AS15169Google LLC
3185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
3216.239.32.36Google · CDNUnited States
AS15169Google LLC
3104.18.22.56Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10128--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14B632CB39498003A675F83DD6052F718FA6AD216D70AC6B4B2FD512C9BC6EF205A371C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:UYypn9o4NNNNp1iVIcIhImEbm7dwJEDNGJ65cHCVCiBPtcCXvAQwRAoh:U5foVVX4omhwwNGJ6WHCVCiBPtcCXvAL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67413:q1NgDgskwGAEFQYgG4welsCmkIgdACEAJH4QrWJJAGCkA1ECCBgAdQEwAIBAIQcCrPCREYBRUVWkQD4USgLBC2osQDoYNSyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data