Security Scan Report: zrok.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 8 domains to perform 26 HTTP transactions. The main domain is zrok.io and was registered 4 years 2 months ago.

Submitted URL: https://zrok.io

AI Security Verdict

Safe Website

Confidence: 92%

0
Risk Score

Established, self-branded open-source project site (zrok by NetFoundry) with no forms, no impersonation, and no threat-intel, YARA or phishing indicators. Legitimate.

Safety Factors (5)
Well-established domain (4+ years old), not a newly registered host
Legitimate self-branding consistent with domain and OG site name
No credential, login or payment forms present
No Indicators of Compromise, malware YARA matches, or Safe Browsing hits
Content is coherent technical/documentation material for a real open-source product
Domain age information unavailable

Details

Page Title

Home - zrok by NetFoundry

Scan Type

public

Domain Name Analysis

The domain 'zrok.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and has no subdomain. Its registrable label 'zrok' stretches across 4 characters holding 1 vowel versus three consonants. Breaking it apart gives two words: z, rok. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zrok.io

Page Load Overview

4.54s
Total Load Time
17.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,891 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software52% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
52%
government public service
46%
documentation technical
45%
download file sharing
40%
cryptocurrency blockchain
38%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13104.199.116.47Google · CDNThe Dalles, Oregon, United States
AS396982Google LLC
1192.178.183.97Google · CDNUnited States
AS15169Google LLC
123.32.238.243Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1216.239.32.36Google · CDNUnited States
AS15169Google LLC
1142.251.127.154Google · CDNUnited States
AS15169Google LLC
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
1142.251.110.149Google · CDNUnited States
AS15169Google LLC
1142.251.110.97Google · CDNUnited States
AS15169Google LLC
123.32.238.177Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2614--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124632A6143AC88B2706BC365558DF31DF1557406C6DA0292F1BDC2A49BCEFB52AB3B0E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:PE5ZUYvPBY/DAW7TiO1SBotBpV75j8OgAEF92hkOrEzvRs/E5zd/eVq65HWG:c3kHmto7D5j8O4SkiEzvR/5ztW75HZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:69336:jBQWCOEAEMBxAF1riikAA2BQBQQ9CdE5AKAUGZ15EAMDwMEABqQAJDwERQK8piKVpEFLVQQlQjAoPAHCACCI4wBythDRAg7Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00300000000018
Perceptual Hash:cac49cf1b89cc1ce
Difference Hash:28c5e1c1c9cdf171
Wavelet Hash:ff017901616119ff
Color Hash:#2dd298

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data