# marceldezoete.nl home page introducing the Zingende Slager | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/marceldezoete.nl/
Machine-readable companion: https://phishdestroy.io/domain/marceldezoete.nl/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-01 01:30:07 UTC
- Last availability or vendor check: 2026-11-01 01:32:25 UTC
- Stored record updated: 2026-11-01 03:00:14 UTC
- VirusTotal detections in the stored snapshot: 4/92
- Independent public blocklist matches in the stored snapshot: 1
- Matching public blocklists: PhishFeed
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 185.37.71.72
- Registrar in stored WHOIS data: Realtime Register
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2001-10-10 22:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a194bb-c00f-74a9-ba80-8a6e8d323044/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/marceldezoete.nl
- Certificate Transparency search: https://crt.sh/?q=%25.marceldezoete.nl
- Web Archive lookup: https://web.archive.org/web/*/https://marceldezoete.nl/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the marceldezoete.nl home page, where Marcel de Zoete introduces himself as the Zingende Slager and lists his repertoire.

The captured marceldezoete.nl home page introduces Marcel de Zoete, described as the Zingende Slager, with a banner bearing his name and the tagline "van alle muzikale markten thuis." The main content is a Dutch introduction explaining that he has performed since 1999 with a repertoire of more than 1000 songs, offers contact details for questions, and points visitors to repertoire buttons such as AGENDA and decade-themed selections below.

The stored VirusTotal domain result reports 4 detections out of 92 engines. Webroot reported "malicious"; SOCRadar reported "phishing".
Package revision: 675e7b97f65a2cc8e54bf14534af802f3b57a6bcabad21b5f0704090bd60f7d9
Text generated (not scan time): 2026-11-01 03:01:12
Reviewed evidence snapshot: {"domain":"marceldezoete.nl","screenshot_available":true,"page_title":"Home","original_meta_description":"Marcel de Zoete ook wel de Zingende Slager genoemd. Want vanaf 1999 geef ik optredens in heel het land van gezellige meezingers, de lekkerste gouwe ouwe hits of de actueele muziek van nu. En dat nu al 20 jaar. De laatste jaren samen met m'n dochter Jessica. Met een repertoire van meer dan 1000 liedj","initial_ai_description":"The page presents a login form for 'Metanet' on a domain that is clearly not associated with 'Metanet'. The domain 'marceldezoete.nl' is a personal domain, not a corporate one for a service like 'Metanet'. This indicates an attempt to steal credentials for 'Metanet' users.","metadata_observed_on":"2026-11-01","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":4,"engines":92,"malicious":4,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-10-31","flagging_vendors":["Webroot","SOCRadar","Gridinsoft","alphaMountain.ai"],"vendor_labels":{"Webroot":"malicious","SOCRadar":"phishing","Gridinsoft":"phishing","alphaMountain.ai":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T01:33:06Z"},"virustotal_public_summary":"The stored VirusTotal domain result reports 4 detections out of 92 engines. Webroot reported \"malicious\"; SOCRadar reported \"phishing\".","page_paragraph_target_characters":513}
Source facts (timestamps as stored): {"record_id":1725802,"first_recorded_at":"2026-11-01 02:30:07","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":4,"denominator":92,"malicious":4,"suspicious":0,"vendors":{"Webroot":"malicious","SOCRadar":"phishing","Gridinsoft":"phishing","alphaMountain.ai":"malicious"},"observed_at":"2026-10-31T12:16:26Z","checked_at":"2026-11-01 03:00:53","fetched_at":"2026-11-01T02:00:53Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":4,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Gridinsoft","SOCRadar","Webroot"],"observed_at":"2026-10-31 12:16:26","checked_at":"2026-11-01 03:00:53","fetched_at":"2026-11-01 02:00:54","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 03:00:54"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 02:32:25"}}

## Stored page captures

- Primary capture: https://i.ibb.co/MkFBTDZ9/5c4d21b52cfa.png
  Captured: 2026-11-01 01:32:25 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a194bb-c00f-74a9-ba80-8a6e8d323044.png
  Captured: 2026-11-01 01:32:25 UTC
  Source report: https://urlscan.io/result/01a194bb-c00f-74a9-ba80-8a6e8d323044/
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a1939b-b056-704e-8b9e-6bab10ecd215.png
  Captured: 2026-10-31 20:17:05 UTC
  Source report: https://urlscan.io/result/01a1939b-b056-704e-8b9e-6bab10ecd215/
  SHA-256: 77d490aecb076a629d4b4225cc5e207bd1ff79371573cc3ddfdee33638b5b46d
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a194bd-0d20-73cb-aff6-f4cc0fcd0477.png
  Captured: 2026-11-01 01:33:06 UTC
  Source report: https://urlscan.io/result/01a194bd-0d20-73cb-aff6-f4cc0fcd0477/
  SHA-256: e497c4ae0458abb7c134120ac9f679ca2eab7735870fe7d285d42d6532fd6568
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8871714f-1c25-4763-b42d-965135c63d7f.png
  Captured: 2026-11-01 01:30:41 UTC
  Source report: https://radar.cloudflare.com/scan/8871714f-1c25-4763-b42d-965135c63d7f
  SHA-256: 48e5717ea30df4aea816d90d6da280dabd49e9882f5e7d66278c9716324791c7

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-01T01:46:46Z",
        "uuid": "01a194bb-c00f-74a9-ba80-8a6e8d323044",
        "scanned_at": "2026-11-01T01:31:43Z",
        "final_url": "https://marceldezoete.nl/Kundenbetreuung-service1/index.php",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://marceldezoete.nl/Kundenbetreuung-service1/index.php",
                "from": "http://marceldezoete.nl/Kundenbetreuung-service1/index.php",
                "status": 307
            }
        ],
        "ip": "185.37.71.72",
        "ptr": "server106.yourhosting.nl",
        "domains": [
            "imagizer.imageshack.com"
        ],
        "ips": [
            "23.1.240.250",
            "185.37.71.72"
        ],
        "asns": [
            "20940",
            "48635"
        ],
        "countries": [
            "AU",
            "NL"
        ],
        "doc_hash": "a99ef53194e2a6f570b69aab081f360ea1e3ec788140410928f72acc53091718",
        "globals": [
            "togglePassword"
        ],
        "cookies": [
            "PHPSESSID"
        ],
        "tls": {
            "san": [
                "marceldezoete.nl",
                "www.marceldezoete.nl"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR1",
            "subject": "marceldezoete.nl",
            "protocol": "TLS 1.2",
            "valid_to": "2027-01-08T05:31:29Z",
            "valid_from": "2026-10-10T05:31:30Z"
        },
        "domain_age_days": 1341,
        "apex_age_days": 1341,
        "tls_age_days": 21,
        "tls_valid_days": 89,
        "requests": 3,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html; charset=UTF-8",
            "x-powered-by": "PleskLin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-01T01:46:49Z",
        "uuid": "8871714f-1c25-4763-b42d-965135c63d7f",
        "scanned_at": "2026-11-01T01:30:41Z",
        "final_url": "https://marceldezoete.nl/",
        "status": 200,
        "history": [
            {
                "url": "https://marceldezoete.nl/",
                "status": 200
            }
        ],
        "dom_hash": "6e6ed01c94544252cfd9fd04b36ca0f686b3c7b5b73ee0f166ed3f12b2fb59ec",
        "doc_hash": "23b8fe6bf5a6aaf9eafb4c2d21b2f1083c3f587d045a8f84de43ec56970c5dc8",
        "domain_risks": [
            "Food & Drink",
            "Society & Lifestyle"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "marceldezoete.nl",
                "type": "A",
                "value": "185.37.71.72"
            }
        ],
        "dnssec_valid": true,
        "ip": "127.0.1.6",
        "whois": {
            "registrar": "Realtime Register",
            "created": "2001-10-11T13:28:34Z",
            "updated": "2025-10-22T07:06:06Z",
            "nameservers": [
                "ns-b.dns.yourhosting.eu",
                "ns-v.dns.yourhosting.nl",
                "ns-c.dns.yourhosting.nu"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-01T02:00:53Z",
        "analysis_at": "2026-10-31T12:16:26Z",
        "stats": {
            "timeout": 0,
            "harmless": 58,
            "malicious": 4,
            "suspicious": 0,
            "undetected": 30
        },
        "detections": {
            "Webroot": "malicious",
            "SOCRadar": "phishing",
            "Gridinsoft": "phishing",
            "alphaMountain.ai": "malicious"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Business/Economy, Malicious (alphaMountain.ai)"
        },
        "created": "2001-10-11T00:00:00Z",
        "updated": "2025-10-22T00:00:00Z",
        "first_seen": "2026-04-13T09:20:59Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns-c.dns.yourhosting.nu"
            },
            {
                "ttl": 100,
                "type": "MX",
                "value": "fallback.yourfilter.nl",
                "priority": 20
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns-v.dns.yourhosting.nl"
            },
            {
                "ttl": 100,
                "type": "SOA",
                "rname": "hostmaster.firstfind.nl",
                "value": "ns-v.dns.yourhosting.nl"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns-b.dns.yourhosting.eu"
            },
            {
                "ttl": 100,
                "type": "MX",
                "value": "primary.yourfilter.nl",
                "priority": 10
            },
            {
                "ttl": 100,
                "type": "A",
                "value": "185.37.71.72"
            },
            {
                "ttl": 100,
                "type": "TXT",
                "value": "v=spf1 a mx include:_spf.yourfilter.nl -all"
            }
        ],
        "dns_at": "2026-10-31T12:21:43Z",
        "jarm": "29d29d15d29d29d00029d29d29d29d367956b0f7c241e0ae292cd63faf3f5e",
        "cert": {
            "san": [
                "marceldezoete.nl",
                "www.marceldezoete.nl"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "55062f5846257f9546f64555b268d5848cd",
            "sha256": "d8ec70e8e73c8c4dfccbd19ff636dab7dee8b33f8b80a3f9821294d0bf550e13",
            "subject": "marceldezoete.nl",
            "valid_to": "2027-01-08T05:31:29Z",
            "valid_from": "2026-10-10T05:31:30Z"
        },
        "whois": {
            "created": "2001-10-11T00:00:00Z",
            "updated": "2025-10-22T00:00:00Z",
            "dnssec": "yes"
        },
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2025-10-22T07:06:06Z",
                "registration": "2001-10-11T13:28:34Z",
                "last update of RDAP database": "2026-10-31T08:56:12Z"
            },
            "registrar": "Realtime Register",
            "registrar_iana_id": "0000"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-01T01:32:01Z",
        "mail_config": {
            "mx": [
                "fallback.yourfilter.nl",
                "primary.yourfilter.nl"
            ],
            "spf": "v=spf1 a mx include:_spf.yourfilter.nl -all",
            "dkim": [
                "default"
            ],
            "dkim_bits": 2048,
            "spf_lookups": 7
        },
        "caa_records": {
            "domain": "marceldezoete.nl"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-11-01T01:30:36Z",
            "first": "2002-06-03T22:03:10Z",
            "changes": 104,
            "days_archived": 128,
            "scans_per_day": 0.01,
            "avg_page_bytes": 4800
        },
        "sitemap": {
            "present": true,
            "url_count": 36
        },
        "social_tags": {
            "ogUrl": "https://marceldezoete.nl/",
            "title": "Home",
            "ogType": "article",
            "ogTitle": "Home",
            "keywords": "Marcel de Zoete de Zingende Slager optredens  gezellige meezingers,de lekkerste gouwe ouwe hits of de actueele muziek van nu,En dat nu al 20 jaar,De laatste jaren samen met m,n dochter Jessica,Met een repertoire van meer dan 1000 liedjes zowel,Nederlandstallig als Engelstallig nummers is er voor ied",
            "generator": "Site.pro",
            "description": "Marcel de Zoete ook wel de Zingende Slager genoemd.\nWant vanaf 1999 geef ik optredens in heel het land van gezellige meezingers,\nde lekkerste gouwe ouwe hits of de actueele muziek van nu.\nEn dat nu al 20 jaar.\nDe laatste jaren samen met m'n dochter Jessica.\nMet een repertoire van meer dan 1000 liedj",
            "canonicalUrl": "https://marceldezoete.nl/",
            "ogDescription": "Marcel de Zoete ook wel de Zingende Slager genoemd.\nWant vanaf 1999 geef ik optredens in heel het land van gezellige meezingers,\nde lekkerste gouwe ouwe hits of de actueele muziek van nu.\nEn dat nu al 20 jaar.\nDe laatste jaren samen met m'n dochter Jessica.\nMet een repertoire van meer dan 1000 liedj"
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 280,
                "tls": 30,
                "wait": 85,
                "connect": 12,
                "download": 10
            },
            "response_ms": 417
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "ECDHE-RSA-AES128-GCM-SHA256",
            "protocol": "TLSv1.2",
            "versions": [
                "TLSv1.2"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                80,
                110,
                143,
                443,
                587,
                993,
                995,
                3306
            ]
        },
        "carbon": {
            "bytes": 39222,
            "co2_grams": 0.0014,
            "cleaner_than": 42
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "185.109.217.174",
                    "host": "ns-v.dns.yourhosting.nl"
                },
                {
                    "ip": "195.8.208.6",
                    "host": "ns-c.dns.yourhosting.nu"
                },
                {
                    "ip": "31.25.98.12",
                    "host": "ns-b.dns.yourhosting.eu"
                }
            ],
            "zone": "marceldezoete.nl"
        },
        "location": {
            "ip": "185.37.71.72",
            "asn": "48635",
            "org": "Your Hosting B.V.",
            "city": "Zwolle",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "marceldezoete.nl"
        },
        "dns": {
            "A": [
                "185.37.71.72"
            ],
            "MX": [
                "{\"exchange\": \"fallback.yourfilter.nl\", \"priority\": 20}",
                "{\"exchange\": \"primary.yourfilter.nl\", \"priority\": 10}"
            ],
            "NS": [
                "ns-v.dns.yourhosting.nl",
                "ns-b.dns.yourhosting.eu",
                "ns-c.dns.yourhosting.nu"
            ],
            "SOA": "{\"nsname\": \"ns-v.dns.yourhosting.nl\", \"hostmaster\": \"hostmaster.firstfind.nl\", \"serial\": 2025102204, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1048576, \"minttl\": 14400}",
            "TXT": [
                "v=spf1 a mx include:_spf.yourfilter.nl -all"
            ]
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.37.71.72",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://marceldezoete.nl"
            ]
        },
        "linked_pages": {
            "internal_count": 35
        },
        "whois": {
            "registrar": "Realtime Register Burgemeester Drijbersingel 51 8021JB Zwolle Netherlands SIDN BV",
            "created": "2001-10-11T00:00:00Z",
            "updated": "2025-10-22T00:00:00Z",
            "status": [
                "active"
            ],
            "nameservers": [
                "ns-b.dns.yourhosting.eu",
                "ns-v.dns.yourhosting.nl",
                "ns-c.dns.yourhosting.nu"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "PleskLin"
            }
        }
    }
}
```