ScanMalware.com

Security Scan Report: planning.nu

Redirected to:
https://www.dyflexis.com/login/
Submitted: Apr 17, 2026, 3:43:49 PMCompleted: Apr 17, 2026, 3:44:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 4 countries across 6 domains to perform 20 HTTP transactions. The main domain is dyflexis.com and was registered NaN years ago.

Submitted URL: https://planning.nu

Effective URL: https://www.dyflexis.com/login/Redirected

The Cisco Umbrella rank of the primary domain is #387,090 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

The site redirects from an unrelated, low‑ranked domain to a legitimate Dyflexis login page; brand mismatch and low reputation raise moderate risk.

Risk Factors
Brand name displayed on low‑ranked, unrelated domain
Domain mismatch between brand claim and URL
Unusual redirect from planning.nu to Dyflexis login page
Low Cisco Umbrella reputation for the domain
Garbage text in OCR output
Safety Factors
Domain age >15 years (well‑established)
Final URL points to the legitimate Dyflexis domain
No malicious Indicators of Compromise detected
No JavaScript malware or IDS alerts
No password field – not collecting credentials directly
Domain age information unavailable

Details

Page Title

Login | Dyflexis

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news/blog

(70%)

Domain Information

Domain 'planning.nu' uses the .nu country-code top-level domain without a subdomain. The core label 'planning' covers 8 characters split between two vowels and six consonants. Splitting it apart reveals 1 word: planning. Median word length is eight characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://planning.nu

Page Load Overview

2.52s
Total Load Time
48
HTTP Requests
12
Domains
820 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:18,802 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%
corporate
70%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.250.154.97United States
AS15169Google LLC
8142.251.151.119Germany
AS12876
8142.251.14.94Ireland
AS212238
851.158.131.105Haarlem, North Holland, Netherlands
AS12876Scaleway SAS
8185.173.22.166Netherlands
AS12859BIT BV
852.222.236.60Unknown
AS16509
486--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F583B532251065BEAE9342B0B07CBB2BD147D096C6BED6C077BC4199BBD1D539AA33C4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+NOpInSffu29PzozzzGzXRVqC3DXnW+W0KaB37HKu29PzozzzGzCNzb4/DE8PyUQ:+IjD3XF7HBzbUD3EdTH+itGI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:84125:ICIBaAGJTYQhhWgQURotcgBbMEgCfSBmOpgkKQzChHIQI8EiZgBogACNrkoWEDIAgoJQW4QAwEBsRpACApMIgGrRICI2ScQQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000060e0070f8
Perceptual Hash:c03fc83f90e56d92
Difference Hash:9da1dddcdc16e1a1
Wavelet Hash:ff0165070f03f0fc
Color Hash:#87adc5

Other Hashes

Crop Resistant:5b5b585b5a5a5a5b,fe80620c0c0a00fe,8000004c4c0c2400,9da1dcdcdc16e1a1

Scan History

Scan history not available

Unable to load historical scan data