Security Report: karinandringa.nl - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a02043b3-122f-4963-97cc-97b436ca14e4 Domain and IP registration (RDAP)/api/v1/rdap/a02043b3-122f-4963-97cc-97b436ca14e4 Certificate Transparency/api/v1/ct/karinandringa.nl How often this domain was scanned/api/v1/domain/stats/karinandringa.nl Scan history for this domain/api/v1/domain/history/karinandringa.nl?limit=15

This website contacted 5 IPs in 3 countries across 7 domains to perform 22 HTTP transactions. The main domain is karinandringa.nl and was registered 1 month ago.

Submitted URL: https://karinandringa.nl

Effective URL:

https://www.karinandringa.nl/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate 16-year-old personal site compromised with an analyst-vetted IClickFix/EtherHiding loader; obfuscated script resolves a malicious stage via blockchain, confirmed by CRITICAL IDS malware alerts and a two-feed iclickfix hit on zvh3.com.

Risk Factors (6)

Known malicious click-fix/EtherHiding kit injected into a compromised WordPress site

CRITICAL IDS malware alerts for EtherHiding exfiltration

Blockchain-resolved, obfuscated second-stage loader (EtherHiding technique)

Malicious third-party resource zvh3.com (iclickfix) loaded by the page

Threat-intelligence match against the primary domain (unknown loader)

Injected foreign-language gambling/SEO spam content unrelated to the site's stated purpose

Domain age information unavailable

Details

Page Title

Karin Andringa – Interim allround communicatiespecialist

Scan Type

public

Favicon Hash

MMH3: -470220996

MD5: aa239ed5c88c63d187306f2ac30a5172

Domain Name Analysis

Domain 'karinandringa.nl' uses the Dutch country-code top-level domain (.nl) with no subdomain. The second-level label 'karinandringa' is 13 characters long split between five vowels and 8 consonants. Breaking it apart gives 4 words: karin, and, ring, a. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.09s

Total Load Time

574 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:36%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL

Text Length:4,245 chars

Detector Agreement:100%

Language mismatch: Declared as nl-NL but detected as en

Website Classification

Primary Category

gambling betting83% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

83%

government public service

28%

corporate

25%

Detected Features

Articles

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	94.124.93.186	Netherlands	AS39704CJ2 Hosting B.V.
4	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
4	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
4	104.21.72.64Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	5	-	-