Security Scan Report: arjonoostrom.nl

Redirected to:
https://www.arjonoostrom.nl/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 58 IPs in 4 countries across 31 domains to perform 259 HTTP transactions. The main domain is arjonoostrom.nl and was registered 15 years ago.

Submitted URL: https://arjonoostrom.nl

Effective URL:
https://www.arjonoostrom.nl/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Domain is flagged by multiple threat feeds for ClearFake/loader malware and page scripts contact blockchain RPC nodes. Despite legitimate-looking artist content, treat as malware-compromised and avoid interaction.

Risk Factors (4)
Primary domain has multi-source threat-intel malware classification (ClearFake)
Additional malware Indicators of Compromise against domain (unknown loader)
Blockchain RPC connections to BSC testnet nodes from page scripts
Compromised or maliciously injected scripts likely on an otherwise legitimate WordPress site
Domain age information unavailable

Details

Page Title

Arjon Oostrom

Scan Type

public

Domain Name Analysis

Domain 'arjonoostrom.nl' uses the Dutch country-code top-level domain (.nl) and has no subdomain. The registrable portion 'arjonoostrom' spans 12 characters with 5 vowels and 7 consonants. Word splitting yields 3 words: arj, ono, ostrom. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://arjonoostrom.nl

Page Load Overview

16.12s
Total Load Time
11.2 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:9,232 chars
Detector Agreement:75%

Website Classification

Primary Category

entertainment media92% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
92%
social media network
80%
adult content
60%
blog personal website
47%
government public service
43%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3185.10.132.174Netherlands
AS20857Signet B.V.
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
423.207.210.81Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
43.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
415.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25958--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12214FA61B296163E09178AF2F4B12B2DE552E256DFC685EBB7BD0AF44FC6C703527008

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:TeL5ONAEIPo5f1ivdrU1xRo5UGIDRUAoqkDUV4aclGf6Z8rJy/UQ4:TecKEaoxcvW66JD29qkq4acM6erJp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:204190:0CBCpRkWwcIAYHAQvhyAGNUyPi0AKkQkBBZAcI8AzwclW0KWyQADAAgSMLUxAsICoMJYAAYK8ITRhBojIAIgQcHgAMQxADPi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000300000fffff3
Perceptual Hash:aa12ed19399666c7
Difference Hash:94cbe4d4d9310023
Wavelet Hash:0020741c00ffffff
Color Hash:#99ac53

Scan History

Scan history not available

Unable to load historical scan data