Security Report: radioforstina.nl - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ab6fb2bd-7d29-4148-a0d2-bf3521d63f99 Domain and IP registration (RDAP)/api/v1/rdap/ab6fb2bd-7d29-4148-a0d2-bf3521d63f99 Certificate Transparency/api/v1/ct/radioforstina.nl How often this domain was scanned/api/v1/domain/stats/radioforstina.nl Scan history for this domain/api/v1/domain/history/radioforstina.nl?limit=15

This website contacted 29 IPs in 4 countries across 25 domains to perform 129 HTTP transactions. The main domain is radioforstina.nl and was registered 21 years ago.

Submitted URL: https://radioforstina.nl

Effective URL:

https://www.radioforstina.nl/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Dutch radio site (est. 2018) that has been compromised: injected ErrTraffic/Exvicy loader and a fake Cloudflare ClickFix 'Human Verification' overlay pushing Windows users to paste PowerShell into Terminal, with EtherHiding blockchain exfiltration. Do not interact.

Risk Factors (6)

Injected ErrTraffic/Exvicy WordPress loader (YARA + analyst-vetted kit roster, CRITICAL)

Injected ClickFix 'Human Verification' overlay instructing Windows users to paste code into Terminal

11 CRITICAL IDS alerts for EtherHiding malware exfiltration and blockchain RPC traffic

Multiple third-party domains flagged as ek clearfake-1 / malicious host loaded by the page (lovezramexar.info, makeverizyjar.info, ohhhhhmoney.com, checkyoubrowse.codes)

Unranked third-party JS host karmazarbaza.com contacted via fetch alongside the injected loader

Primary domain itself tagged 'clearfake (malware)' — evidence the legitimate radio site has been compromised

Domain age information unavailable

Details

Page Title

Radio Forstina – INTERNETRADIO VAN NU MET DE BESTE MUZIEK VOOR U!

Scan Type

public

Favicon Hash

MMH3: 292787421

MD5: 88e4850a2f7f9e3a07decbdca6cedd56

Domain Name Analysis

The domain 'radioforstina.nl' uses the Dutch country-code top-level domain (.nl) and has no subdomain. The second-level label 'radioforstina' is 13 characters long holding 6 vowels versus seven consonants. Word splitting yields five words: radio, for, st, in, a. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.11s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇳🇱Dutch

Code: nl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL

Text Length:2,375 chars

Detector Agreement:50%

Website Classification

Primary Category

entertainment media93% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

93%

news media journalism

77%

government public service

74%

blog personal website

71%

technology software

58%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	51.38.119.204	France	AS16276OVH SAS
4	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.217.113.4Google · CDN	United States	AS15169Google LLC
4	142.251.150.119Google · CDN	United States	AS15169Google LLC
4	192.178.183.97Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	158.94.211.226	Rotterdam, South Holland, Netherlands	AS202412Omegatech LTD
4	142.251.153.4Google · CDN	United States	AS15169Google LLC
129	29	-	-