Security Scan Report: www.phfscience.nz

Site favicon
Submitted: Dec 7, 2025, 2:15:41 PMCompleted: Dec 7, 2025, 2:16:34 PMpubliccompleted
Loading additional data...

Summary

This website contacted 43 IPs in 3 countries across 16 domains to perform 135 HTTP transactions. The main domain is phfscience.nz.

Submitted URL: https://www.phfscience.nz/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Site is a high‑risk impersonation of a government agency; treat as confirmed phishing scam.

Risk Factors
Newly registered domain
Brand impersonation of a government organisation on an unranked domain
Lack of established reputation (unranked in Cisco Umbrella)
Domain age information unavailable

Details

Bot Protection Detected

This website is protected by forbidden bot protection. Our scanner was challenged or blocked during access.

Page Title

PHF Science

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(91%)

Domain Information

Domain 'www.phfscience.nz' uses the New Zealand country-code top-level domain (.nz) with subdomain 'www'. The second-level label 'phfscience' is 10 characters long split between 3 vowels and seven consonants. Breaking it apart gives two words: phf, science. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.phfscience.nz/

Page Load Overview

12.85s
Total Load Time
135
HTTP Requests
16
Domains
7.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:7,659 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service91% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
91%
healthcare medical
86%
blog personal website
73%
documentation technical
73%
adult content
71%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
918.245.86.68United States
AS16509AMAZON-02
3209.58.135.152San Jose, California, United States
AS7203LEASEWEB-USA-SFO
323.53.40.208Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3142.250.185.227United States
AS15169GOOGLE
3149.28.215.49Santa Clara, California, United States
AS20473AS-VULTR
3192.178.170.94United States
AS15169GOOGLE
374.125.206.156United States
AS15169GOOGLE
313.107.246.45United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
365.8.131.123United States
AS16509AMAZON-02
323.53.41.97Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
13543--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F744A7042F006F6C10783EAD5746AA6BAF636ABEB5F9085F3EC17A15F46C864C0746C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:obaFqmFqKkCdt0WeGKSwVfnAsqTgk7vRAUQT7iuvrDW8Rsb+UCJAzztS8djxjvvl:WVBPKLYFjiqhjknk+SNbsYY4KYe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:346253:GyGAC0gc+QgMYCJCBgzGwEedWSxOoBFgIjEpIJCEAkB+dASobCLCACkM0wwwEDEWjoAYIATDiKZCAFeAGPIRANBGjC4IjECl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff383e6e3e7c0200
Perceptual Hash:85cf2cc0b1b4d2bd
Difference Hash:716360ceeaccc6fa
Wavelet Hash:ff383eae3e7c0200
Color Hash:#87c595

Scan History

Scan history not available

Unable to load historical scan data