Security Scan Report: dova.nu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 8 domains to perform 139 HTTP transactions. The main domain is dova.nu.

Submitted URL: https://dova.nu

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Legitimate Dutch public transport authority collaboration site (DOVA) on a 16-year-old domain, self-branded, with only a newsletter form and no threat indicators.

Safety Factors (5)
Established 16-year-old domain
Self-branding matching its own domain (not impersonation)
No credential or payment forms — only a newsletter signup with CAPTCHA
No threat-intelligence, hunting rule, or network IDS matches
ML classifier categorises site as government public service
Domain age information unavailable

Details

Page Title

Samenwerkingsverband van decentrale ov-autoriteiten | DOVA

Scan Type

public

Domain Name Analysis

The domain name 'dova.nu' uses the .nu country-code top-level domain with no subdomain. The core label 'dova' covers 4 characters with two vowels and 2 consonants. Word splitting yields 2 words: dov, a. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dova.nu

Page Load Overview

15.65s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl
Text Length:3,329 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service34% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19104.21.70.156Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.251.151.119Google · CDNUnited States
AS15169Google LLC
10184.24.77.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10172.67.168.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.251.155.119Google · CDNUnited States
AS15169Google LLC
10184.24.77.151Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10142.250.154.97Google · CDNUnited States
AS15169Google LLC
1023.53.40.177Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10184.24.77.166Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10142.251.110.94Google · CDNUnited States
AS15169Google LLC
13913--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB22EF12551CB93E621226A8FEBEBD3FD1D5E4B3D15DA326F46E4CF983EA8380055D02

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:iIpwJGp67Q7paSuzVa7O/4WI5IheUgXGdZ3KwzEyD:iowJGp6caSbKA35iIXGvNzvD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10518:EgAkFLZAggAvsG5LBQQHIJgJwCga4ACQQcYQAoJF8QBgCExQoAQEQACAkMFAWkIRDlDEjegII2QASCgMBQSR3nCfFgAIBkCx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffdf818183ffdf8f
Perceptual Hash:b86fc6c6386dc138
Difference Hash:283a133337083636
Wavelet Hash:bf8f818181ff8383
Color Hash:#93401f

Scan History

Scan history not available

Unable to load historical scan data