Security Scan Report: llm.nu

Redirected to:
https://www.llm.nu/
Site favicon
Submitted: Oct 15, 2026, 11:20:25 AMCompleted: Oct 15, 2026, 11:21:18 AMpubliccompleted

This website contacted 22 IPs in 2 countries across 12 domains to perform 251 HTTP transactions. The main domain is llm.nu and was registered 13 years ago.

Submitted URL: https://llm.nu

Effective URL:

https://www.llm.nu/
Redirected

AI Security Verdict

Safe Website

Confidence: 82%

1
Risk Score

Swedish Lutheran literature mission on its own matching domain, with only a standard contact form and no credential/payment fields. Sole threat-intel hit is an unverified report on an unrelated shared Wix IP. No phishing or malware signals.

Safety Factors (5)
No credential or payment form anywhere on the page
Site displays its own brand, clearly matching its domain
Legitimate contact and organisational information present
No JavaScript malware, no IDS alerts, no network phishing indicators
Third-party script hosts are ranked, mainstream Wix CDN/analytics domains
Domain age information unavailable

Details

Page Title

Luthersk litteratur mission

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'llm.nu' is registered without a subdomain. Count 3 characters in 'llm' split between zero vowels and 3 consonants. Breaking it apart gives 2 words: ll, m. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://llm.nu

Page Load Overview

9.69s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:3,898 chars
Detector Agreement:60%

Website Classification

Primary Category

education learning55% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
55%
healthcare medical
51%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20172.66.3.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11185.230.63.107Ashburn, Virginia, United States
AS58182Wix.com Ltd.
1134.49.229.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1165.8.131.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1132.192.152.105Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1134.149.206.255Google · CDNKansas City, Missouri, United States
AS396982Google LLC
11151.101.130.217Fastly · CDNUnited States
AS54113Fastly, Inc.
11185.230.63.186Ashburn, Virginia, United States
AS58182Wix.com Ltd.
1165.8.131.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1165.8.131.76Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
25122--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D08519D4B14485389E27B3ADF34ABD4CEA153A018E5636AEF8E641D496C36F602C731F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:4de7khH3R3Vd8aDvrYl5h4Pz33s1WO35L:4dukhH3pVd8crYl5E33s1n5L

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1740466:oDpRiAATqATMRIAQVwCgGsCJsHRTZURkAJQoGXFVZgSKrAKhkLgpJMAQJCKCAIAAlAAAOQyKjEElJhARtBgDmIQUYKwAADSA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbf10981800d9ff
Perceptual Hash:ca96b521c9fa6287
Difference Hash:1e656131b3b13302
Wavelet Hash:ff9f10181800d9ff
Color Hash:#79ced2

Scan History

Scan history not available

Unable to load historical scan data