Security Scan Report: zekerzit.nl

Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 3 countries across 15 domains to perform 241 HTTP transactions. The main domain is zekerzit.nl and was registered 11 years ago.

Submitted URL: https://zekerzit.nl

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate 11-year-old Dutch chair-rental site that has been compromised: obfuscated injected script uses EtherHiding/ClickFix to pull a malware stage from flagged blockchain RPC hosts. Avoid visiting until cleaned.

Risk Factors (5)
Compromised page serving an IClickFix/EtherHiding malware loader to visitors
Obfuscated injected script contacting threat-intelligence-flagged RPC hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co) to fetch the next stage from a blockchain contract
Multiple CRITICAL network IDS malware alerts (ClickFix domain in TLS SNI and DNS, EtherHiding exfiltration)
Primary domain reported in threat intelligence as delivering an unknown stealer (single-source, unverified)
Third-party resource xzx1.com associated with the IClickFix campaign
Domain age information unavailable

Details

Page Title

zekerzit.nl, Gezellig bij het bezoek zitten, topmerk Fitform sta-op stoel

Scan Type

public

Domain Name Analysis

The domain 'zekerzit.nl' uses the Dutch country-code top-level domain (.nl) and has no subdomain. The registrable portion 'zekerzit' spans 8 characters containing 3 vowels alongside 5 consonants. Breaking it apart gives three words: zeke, rz, it. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

af Zeker door héél Nederland „085-1104922 _Winfo@zekerzitnl —_ fiero) Home _ Verhuur «Verkoop « Voorraad « Reviews Opties © Contact » Q Sta-op stoelen, comfortabel zitten Zelfstandig blijven en e...

Page Load Overview

6.46s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:11,025 chars
Detector Agreement:100%

All Detected Languages

🇳🇱nl(90%)🇿🇦af(4%)🇺🇸en(3%)🇮🇹it(1%)🇮🇩id(1%)

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%
corporate
70%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
171188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.26.0.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
7142.251.157.119Google · CDNUnited States
AS15169Google LLC
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
7104.26.1.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.20.155Google · CDNUnited States
AS15169Google LLC
7188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.127.95Google · CDNUnited States
AS15169Google LLC
7104.21.5.110Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24131--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11984086275762C36012F76EFA04A730C51838BD6D60252F2F1BE426CA7F0D913AA779D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:G287X1h1lyahWNDqEIrIrIrIrIvOymqEIrIrIrIrI6VlhpILBHu5T/2h9kIfS:eFOwkOS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:379523:wITCUKZCIARYwQwYSPjYqqoAgVZQo4kAyFYKCAIgISsUHg9O0FAiFhFCYzQEDFekAUgK8gVIA4gBRbUKgUALsCIZIJFwsAVB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c0000
Perceptual Hash:8a9b34659b9acf90
Difference Hash:c4dce96969e1ddcd
Wavelet Hash:3c3c3c3c3c3c3c2d
Color Hash:071c0000000

Scan History

Scan history not available

Unable to load historical scan data