Security Scan Report: www.candi.nhs.uk

Redirected to:
https://www.northlondonmentalhealth.nhs.uk//
Site favicon
Submitted: May 29, 2026, 7:08:28 AMCompleted: May 29, 2026, 7:10:18 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 4 domains to perform 2 HTTP transactions. The main domain is northlondonmentalhealth.nhs.uk.

Submitted URL: http://www.candi.nhs.uk

Effective URL: https://www.northlondonmentalhealth.nhs.uk//Redirected

AI Security Verdict

Safe Website

Confidence: 85%

1
Risk Score

Site appears legitimate; redirects to official NHS domain with no phishing or malware indicators.

Safety Factors
Final URL aligns with the claimed NHS brand
Absence of malicious scripts or exfiltration behavior
No suspicious external links or redirects beyond the legitimate NHS domain
Hosted on a standard government TLD (.nhs.uk)
Domain age information unavailable

Details

Page Title

Home - North London NHS Foundation Trust | North London NHS Foundation Trust

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(25%)

Domain Information

Domain 'www.candi.nhs.uk' uses the United Kingdom country-code top-level domain (.nhs.uk), featuring subdomain 'www'. The core label 'candi' covers 5 characters containing two vowels alongside 3 consonants. Tokenizing the label suggests 2 words: can, di. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.candi.nhs.uk

Page Load Overview

5.26s
Total Load Time
95
HTTP Requests
10
Domains
16.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:11,381 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical25% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
25%
news/blog
20%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3313.226.244.91United States
AS16509Amazon.com, Inc.
3151.11.17.108London, England, United Kingdom
AS8075Microsoft Corporation
31142.251.127.100United States
AS15169Google LLC
953--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F04B8E1AC719239222B87D831BFD626B3A251C0DD019F55B7FD12E84BD4FAC252E14B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:GRbzalgbVybVtbVprFnjJmk7CWFeGcjvOoUvte55DPYxkoMH3q7YkAZjG70:yzalgbVybVtbVNFnjUk7CWFZcjvOoSQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:180628:I5AAMRhUCAjBIKYcBBr4ZQEEpGxE0KE8htMBIAHAgMDLcoUkEEEI8DgQJjGFBQGmCFaIEIiCGWAgIUA4DBAwi0VcOAk0MksB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f3ffffdbd1d0f0f0
Perceptual Hash:ed92666d38d71096
Difference Hash:06233036131226b6
Wavelet Hash:e3fbffc8d0c0e010
Color Hash:#9279d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data