Security Scan Report: nelnet.com

Site favicon
Submitted: Dec 23, 2025, 7:36:22 PMCompleted: Dec 23, 2025, 7:37:23 PMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 7 domains to perform 22 HTTP transactions. The main domain is nelnet.com and was registered NaN years ago.

Submitted URL: https://nelnet.com/

The Cisco Umbrella rank of the primary domain is #253,895 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 84%

7
Risk Score

Phishing page on a legitimate domain – high risk, do not trust.

Risk Factors
Phishing lure text directing users to bookmark a malicious login URL
Brand impersonation of Federal Student Aid on a non‑official domain
Low Cisco Umbrella ranking for a site claiming official brand status
Domain age information unavailable

Details

Page Title

Welcome to Nelnet, a Student Loan Servicing Company

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(41%)

Domain Information

Within the commercial generic top-level domain (.com), 'nelnet.com' is registered with no subdomain. Its registrable label 'nelnet' stretches across 6 characters with 2 vowels and four consonants. It segments into 2 words: nel, net. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nelnet.com/

Page Load Overview

4.47s
Total Load Time
22
HTTP Requests
7
Domains
576 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,412 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service41% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
41%
finance banking
34%
education learning
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
865.9.175.15United States
AS16509AMAZON-02
2216.69.100.206United States
AS17242UNIPAC
2104.18.40.238United States
AS13335CLOUDFLARENET
2142.250.184.202United States
AS15169GOOGLE
218.244.18.74United States
AS16509AMAZON-02
2151.101.65.229United States
AS54113FASTLY
2172.64.147.18United States
AS13335CLOUDFLARENET
2142.251.140.168United States
AS15169GOOGLE
228--

Detected Technologies1

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B7723F62A4FA5637409795E17665AF1BBF81C20BDA2B958272FC07D40FC3C9ADC1346C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:EpTL4pRHzs2GhVKUgtL1IQnKKIirP7UoWhdodvTKNzYCJsU8R:kTEpRHzs2GhoemXP7RwdodvGN5WU8R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16812:wUQFCJkQBAMAfATwUJgkbMCAITEBLEcQgSHk9JhCOwAO85LAmACcIlUzCZJSugAIGaAAAsRA0IIIKgEiIAwQAPgmoMAwUdyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00103c3c3c3c3c7e
Perceptual Hash:8e3fb462e04bd9b0
Difference Hash:06e060e9e8e8e8dc
Wavelet Hash:00183c3c3e3e7e7e
Color Hash:#87a5c5

Scan History

Scan history not available

Unable to load historical scan data