Security Scan Report: komindekeet.nl

Redirected to:
https://www.komindekeet.nl/
Site favicon
Submitted: Oct 14, 2026, 4:39:10 PMCompleted: Oct 14, 2026, 4:40:22 PMpubliccompleted

This website contacted 28 IPs in 3 countries across 14 domains to perform 99 HTTP transactions. The main domain is komindekeet.nl and was registered 18 years ago.

Submitted URL: https://komindekeet.nl

Effective URL:

https://www.komindekeet.nl/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised legitimate Dutch site now serving an injected IClickFix/EtherHiding loader: obfuscated script fetches its next stage from an Ethereum contract, confirmed by a CRITICAL IDS malware alert and analyst-vetted kit roster.

Risk Factors (4)
Known malicious ClickFix/EtherHiding loader injected into site markup (IClickFix family iclickfix-sepolia-2026-10)
Obfuscated JavaScript with hidden threat-feed hosts and blockchain-based payload retrieval
CRITICAL network IDS alert for malware EtherHiding exfiltration
Threat-intelligence indicator for the primary domain as a malware loader
Domain age information unavailable

Details

Page Title

Kom in de keet – Kom in de keet

Scan Type

public

Domain Name Analysis

The domain name 'komindekeet.nl' uses the Dutch country-code top-level domain (.nl) and has no subdomain. Count 11 characters in 'komindekeet' containing five vowels alongside six consonants. Tokenizing the label suggests four words: kom, in, dek, eet. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://komindekeet.nl

Page Load Overview

6.61s
Total Load Time
56.4 MB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL
Text Length:1,305 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18185.104.30.100Netherlands
AS206281Stichting DIGI NL
323.36.162.212Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
323.45.103.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3142.251.150.4Google · CDNUnited States
AS15169Google LLC
3142.251.127.93Google · CDNUnited States
AS15169Google LLC
395.100.110.14Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3172.217.208.95Google · CDNUnited States
AS15169Google LLC
9928--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F6329B2D58D407B971B96D2B178F35872579235CB02CAF8B5F821ACF748BE600E690D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7oa5kxefypQzU3AymOAvAzmxAjQVB2ZXIqGeUeufyLgybxp40JukayusURV/bgLS:ca5kwqqzU3Ay3AvAzkAjQqHxS0JukayS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:67772:wowYGAYWiCpUQVyBKEYI0wAnCBGlAoAKAxVJKDQQApZACQVBUQGUBAEBkSRgKHwApYiNA1ASQqwZArAEJhFTqAY8glCcEOYA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000000000ff
Perceptual Hash:b81c9c1ebc9c9cb4
Difference Hash:224d15154d290116
Wavelet Hash:ff0111190101ffff
Color Hash:#6ce0bd

Scan History

Scan history not available

Unable to load historical scan data