ScanMalware.com

Security Scan Report: casinoudenrofus.nu

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e5316cfd-0ecd-44db-b63e-1f340a8befe2Domain and IP registration (RDAP)/api/v1/rdap/e5316cfd-0ecd-44db-b63e-1f340a8befe2How often this domain was scanned/api/v1/domain/stats/casinoudenrofus.nuScan history for this domain/api/v1/domain/history/casinoudenrofus.nu?limit=15
This website contacted 6 IPs in 3 countries across 5 domains to perform 32 HTTP transactions. The main domain is casinoudenrofus.nu.

Submitted URL: https://casinoudenrofus.nu

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Self-branded Danish affiliate guide promoting unlicensed offshore casinos and bypassing the Rofus self-exclusion system. No forms, impersonation, malware, or threat-intel hits — regulatory/consumer-harm concern, not technical phishing.

Risk Factors (3)
Promotes unlicensed offshore online casinos to Danish users
Encourages playing outside the Danish self-exclusion (Rofus) system
Six cross-domain redirects in the capture chain
Safety Factors (5)
Self-branding: title/meta match own domain casinoudenrofus.nu — no impersonation of another entity
No credential, login, or payment forms on the page
No Indicators of Compromise, no YARA malware patterns, no network IDS alerts
No cross-origin credential exfiltration or malicious JavaScript behavior
SPILNU is mentioned only as a recommended third-party casino, not impersonated
Domain age information unavailable

Details

Page Title

Casino Uden Rofus 2026 | Udenlandsk Casino Online & Spillesider Uden NemID - casinoudenrofus.nu

Scan Type

public

Domain Name Analysis

Within the .nu country-code top-level domain, 'casinoudenrofus.nu' is registered and has no subdomain. Count 15 characters in 'casinoudenrofus' containing seven vowels alongside 8 consonants. It segments into five words: casino, ude, nr, of, us. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://casinoudenrofus.nu

Page Load Overview

1.15s
Total Load Time
487 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da
Text Length:8,906 chars
Detector Agreement:60%

Website Classification

Primary Category

gambling betting72% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
72%
entertainment media
27%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7193.3.168.132Oude Meer, North Holland, Netherlands
AS211381Podaon SIA
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
587.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
577.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
587.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
326--

Detected Technologies4

PHPv7.4.33
40%
Nginx
40%
HSTS
40%
Yandex.Metrika
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4F2966380F1522B602391D6AAA27F4F7FD4C857C1168504BFED46EAAF86C958D33B4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:mMLD1+2YIN48Vt3cvgVy4YIqgH8T45toDW9xx:mM42jN48L3ygVndF8T45EW9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36667:gIXAhQBNF5HXQGRgGIcOgzQBkgKUDmECpLUQJTBlgiQcAARMAAAIFcwCJaVkGABoUosxzIEk6wELgQNC0CYjroHIDTAOCAfp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data