Security Scan Report: zhondaruveai.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 1 domain to perform 8 HTTP transactions. The main domain is zhondaruveai.net and was registered 2 months ago.

Submitted URL: https://zhondaruveai.net/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Page reproduces an analyst-vetted 'AI trading platform' lead-funnel kit (CRITICAL YARA match) that collects sign-ups and phone numbers by SMS for call-centre fraud under an invented brand with no verifiable company or licence.

Risk Factors (7)
Native YARA hit for a known AI-trading investment-scam lead-funnel kit (SMS phone verification overlay, /api/leads token wrapper)
Analyst-vetted kit-roster match: fake AI trading platform for call-centre fraud
High-severity network IDS alert (Spamhaus DROP) on the scanned host
Fabricated financial-technology service with no corporate identity, address or licence
New domain (66 days) built solely to promote an invented investment platform
External links to unrelated suspicious .cfd / .pro hosts
Inline scripts use encoding/decoding functions typical of lead-funnel obfuscation
Domain age information unavailable

Details

Page Title

Zhondaruve AI — AI-platform voor slimme data-analyse

Scan Type

public

Domain Name Analysis

You're looking at domain 'zhondaruveai.net' on the network infrastructure generic top-level domain (.net) with no subdomain. The core label 'zhondaruveai' covers 12 characters split between six vowels and six consonants. Tokenizing the label suggests 5 words: zh, on, dar, uvea, i. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zhondaruveai.net/

Page Load Overview

1.22s
Total Load Time
35 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl
Text Length:3,392 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software47% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
47%
corporate
35%
government public service
35%
documentation technical
30%
corporate business
26%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4158.94.210.119Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1104.21.82.105Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.148.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
85--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T111634B553182140953E3A1E6E39B7A1DBA2DD1038849C454BEFE4262DFE7FA3B17278C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:Bd2r3Q23EAQQxFbIIsKVeTwTSgpVYa23p7rI+iT3uQ/KUrFq9LhN3REyyIQrpPJM:Wr3Q2Qc9II7osTSIed0/K8y7r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67086:AIyYBQAUwD9AK4aADIiAJossAAQUFAtBPhMKTBBJHikiMDwCAAACBeEz7FQocjIQEBAIQNA4AgBAIckBJMB1gkYAARkUAQg2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8c0d8f0f0ff8f
Perceptual Hash:d8d9a187cca9a363
Difference Hash:6330182020c22338
Wavelet Hash:f8f8c0d8f0f0b585
Color Hash:#2dd24e

Other Hashes

Crop Resistant:6330182020c22338

Scan History

Scan history not available

Unable to load historical scan data