Security Scan Report: nextcloud-app.steene.org

Submitted: Apr 27, 2026, 2:30:31 PMCompleted: Apr 27, 2026, 2:31:46 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is nextcloud-app.steene.org and was registered NaN years ago.

Submitted URL: https://nextcloud-app.steene.org/login

AI Security Verdict

Moderate Risk

Confidence: 94%

5
Risk Score

The site pretends to be the official Nextcloud login page, uses a non‑official unranked domain and harvests credentials – high risk phishing.

Risk Factors
Brand impersonation (Nextcloud) on unranked domain
Credential collection form on suspicious domain
Unranked domain in Cisco Umbrella reputation list
Safety Factors
Domain age >12 years (well‑established)
No malicious Indicators of Compromise detected
No JavaScript malware YARA matches
No network IDS alerts
Established domain (4618 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Login – Nextcloud

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(77%)

Domain Information

Within the non-profit oriented generic top-level domain (.org), 'nextcloud-app.steene.org' is registered and includes subdomain 'nextcloud-app'. The registrable portion 'steene' spans 6 characters containing three vowels alongside three consonants. Splitting it apart reveals two words: steen, e. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nextcloud-app.steene.org/login

Page Load Overview

3.04s
Total Load Time
24
HTTP Requests
1
Domains
307 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:278 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
77%
documentation technical
38%
corporate
25%

Detected Features

Login Form
Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24155.4.121.194Västerås, Västmanland County, Sweden
AS8473Bahnhof AB
241--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0F49FF29C4434257A27D31571CFAB6A331BB1035C22968DD48E70890FFABED627257A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:u5Ph/aZtB4b6chxpBOSabYKgPZtB4bSUDqNkg2EeFlqkva2V:C5Mt3ctk7V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:744493:CIQkCGKHR4NDkgiKQSwgrqopaewFmKCAPBDCAM4LjYCGVlALQSMdIAARASqBAwYwAxGAkAIAQhUISRDEiO4mowABVIEJUFRR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181879ffffff
Perceptual Hash:895cb6e3411e9de1
Difference Hash:10b232b2d39a34e2
Wavelet Hash:0000180879ffffff
Color Hash:#2d5ed2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data