ScanMalware.com

Security Scan Report: nflug.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/57110e96-5780-4ca0-9442-cfa0a455bd94Domain and IP registration (RDAP)/api/v1/rdap/57110e96-5780-4ca0-9442-cfa0a455bd94How often this domain was scanned/api/v1/domain/stats/nflug.comScan history for this domain/api/v1/domain/history/nflug.com?limit=15
This website contacted 13 IPs in 3 countries across 10 domains to perform 21 HTTP transactions. The main domain is nflug.com and was registered 4 years 1 month ago.

Submitted URL: https://nflug.com

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Primary domain matches strelastealer malware Indicator of Compromise; page is an expired parked domain with no forms, but the content-malware IoC mandates HIGH_RISK.

Risk Factors (3)
Primary domain flagged for strelastealer malware (content-malware Indicator of Compromise).
Expired/parked page with monetized related-search links.
Unranked domain reputation.
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'nflug.com' is registered. Its registrable label 'nflug' stretches across 5 characters holding 1 vowel versus 4 consonants. It segments into 2 words: nfl, ug. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nflug.com

Page Load Overview

11.51s
Total Load Time
296 KB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:62%
Script:Latin
Direction:ltr

Detection Details

Text Length:117 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content44% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
44%
news media journalism
28%
phishing scam
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
954.192.35.85United Kingdom
AS60068Datacamp Limited
1103.224.182.249San Diego, California, United States
AS133618Trellian Pty. Limited
154.192.35.122United States
AS8075Microsoft Corporation
1195.181.175.40Datacamp 路 CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1150.171.109.194Azure 路 CLOUDUnited States
AS8075Microsoft Corporation
187.248.119.252United Kingdom
AS203220Yahoo-UK Limited
1188.114.96.9Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
1212.102.56.178Datacamp 路 CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1150.171.109.104Azure 路 CLOUDUnited States
AS8075Microsoft Corporation
1185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
2113--

Detected Technologies1

Onsen UI
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T172E2B41446F1041519972064EEBF6EC873755A23A64CEC08BD8CAA40FFAD9B78DB67F0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:3BZBsjBjrAyhtbgt4MiIO/5/9SL00H4izsRc+ruLK+ruLkQYlG:DMMzPzWrr2Fr2kE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33347:oAOgA1sAMYwFCeAFkPQQAQnSyCYFFMCFxC2JEFp5U66CSGQkFDxQAA45AIoARRURtgQZYEQFYUwERE+kJAFAgROAiyVtIQIQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9b4abb65
Difference Hash:7196969797b3b33b
Wavelet Hash:0042ffc7c31918ff
Color Hash:#79a3d2

Other Hashes

Crop Resistant:7196969797b3b33b,619696179696b3b2

Scan History

Scan history not available

Unable to load historical scan data