Security Report: sraak.nl - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/46d12191-407a-4cf0-883c-bf5d219d3517 Domain and IP registration (RDAP)/api/v1/rdap/46d12191-407a-4cf0-883c-bf5d219d3517 Certificate Transparency/api/v1/ct/sraak.nl How often this domain was scanned/api/v1/domain/stats/sraak.nl Scan history for this domain/api/v1/domain/history/sraak.nl?limit=15

This website contacted 12 IPs in 3 countries across 13 domains to perform 169 HTTP transactions. The main domain is sraak.nl and was registered 29 years ago.

Submitted URL: https://sraak.nl

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate-looking Dutch candle shop whose page is compromised: CRITICAL EtherHiding malware IDS alert, blockchain RPC exfiltration, and content-malware Indicators of Compromise on both the primary and a loaded domain.

Risk Factors

Content-malware Indicators of Compromise match on the PRIMARY scanned domain (stealer)

CRITICAL IDS alert indicating active network trojan / EtherHiding exfiltration

Blockchain RPC connection used as malware delivery/exfiltration channel

Second independently corroborated malware domain loaded as a page resource (xaz2.com / iclickfix)

Domain age information unavailable

Details

Page Title

SRAAK – Take me to the candle shop

Scan Type

public

Favicon Hash

MMH3: 989458256

MD5: 58dd44dc73e3a47d98e69dcf1516ea0e

Domain Name Analysis

The domain 'sraak.nl' uses the Dutch country-code top-level domain (.nl) while skipping any subdomain. Its registrable label 'sraak' stretches across 5 characters containing 2 vowels alongside three consonants. Tokenizing the label suggests 2 words: sra, ak. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.97s

Total Load Time

8.1 MB

Total Size

Language Analysis

Primary Language

🇳🇱Dutch

Code: nl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL

Text Length:4,428 chars

Detector Agreement:50%

Website Classification

Primary Category

forum40% confidence

Type: spa

Method: structural

All Detected Categories

forum

40%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	185.189.182.16	Netherlands	AS215747NubaCloud B.V.
14	192.178.183.97Google · CDN	United States	AS15169Google LLC
14	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	104.26.12.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	142.251.14.113Google · CDN	United States	AS15169Google LLC
14	74.125.29.95Google · CDN	United States	AS15169Google LLC
14	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
14	192.178.183.94Google · CDN	United States	AS15169Google LLC
14	216.239.34.36Google · CDN	United States	AS15169Google LLC
169	12	-	-