Security Scan Report: rubixcreative.nl

Site favicon
Submitted: Sep 13, 2026, 7:47:34 AMCompleted: Sep 13, 2026, 7:48:54 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Likely legitimate Dutch marketing agency (Rubix Creative) whose site appears COMPROMISED: CRITICAL IDS EtherHiding Exfil alert, blockchain RPC connection, and a malware-flagged third-party resource (xaz2.com) indicate malicious injection.

Risk Factors
Critical IDS malware alert (EtherHiding Exfil M2) triggered on the page
Malicious third-party resource xaz2.com (iclickfix) loaded, corroborated by two feeds
Blockchain RPC connection to a Sepolia testnet node — abnormal for a marketing agency site and a known EtherHiding technique
Unverified malware (RAT) threat-intel report against the primary domain
Domain age information unavailable

Details

Page Title

Online Marketing Bureau Gouda - Rubix Creative

Scan Type

public

Domain Name Analysis

You're looking at domain 'rubixcreative.nl' on the Dutch country-code top-level domain (.nl) and has no subdomain. The core label 'rubixcreative' covers 13 characters containing 6 vowels alongside seven consonants. Breaking it apart gives 3 words: rub, ix, creative. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rubixcreative.nl

Page Load Overview

29.61s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:3,787 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate business89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
89%
blog personal website
42%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19142.251.127.95Google · CDNUnited States
AS15169Google LLC
6142.251.153.119Google · CDNUnited States
AS15169Google LLC
685.10.130.29Netherlands
AS20857Signet B.V.
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
623.194.190.166Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6192.178.183.94Google · CDNUnited States
AS15169Google LLC
6172.64.146.215Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.155.119Google · CDNUnited States
AS15169Google LLC
12719--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BDC4FA62FD88233866334725E4C8A72436289043FB521EE9F598D45F87CE19B31677EB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:GASisA6lwe0BdKJd4cZp17CUPX73tEyj4Cdixm6OV594h5ywq0:/4A6lwe0Bd0Zp17CCdixm6K5965ywq0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:555470:IVERvbXwIChhIkC4GwKVxAMgBFRz2RDAAkIVAiBhBLuaIIAUgIAmUIAwRIKjNAoJUqDAgGeUD0QgIuouqYBQw0aA8DMUKgwl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0740e0c000007f
Perceptual Hash:e1d29ddd84e18559
Difference Hash:c41c8c8c8e0243c7
Wavelet Hash:ff0fe2e3e00000ff
Color Hash:#bf4055

Scan History

Scan history not available

Unable to load historical scan data