# PhishDestroy domain threat record: zilverrekenisdom.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/zilverrekenisdom.net/
Machine-readable companion: https://phishdestroy.io/domain/zilverrekenisdom.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 20:11:48 UTC
- Last availability or vendor check: 2026-10-26 20:11:48 UTC
- Stored record updated: 2026-10-26 21:00:10 UTC
- VirusTotal detections in the stored snapshot: 2/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-18 16:34:49 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a179d6-0445-745e-b51b-71b9511a8bc8/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/zilverrekenisdom.net
- Certificate Transparency search: https://crt.sh/?q=%25.zilverrekenisdom.net
- Web Archive lookup: https://web.archive.org/web/*/https://zilverrekenisdom.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI assessment on 2026-10-26 classified zilverrekenisdom.net as malicious because it claims to be an AI platform for smart portfolio analysis, a pattern commonly used in fraudulent investment schemes. The site returned an HTTP 200 response on the same date, confirming the page was reachable at that time.

How the scam works
In an AI investment scam the attacker advertises an automated service that promises superior portfolio recommendations, then pressures visitors to disclose personal data or transfer money to accounts under the attacker’s control. The AI claim creates a veneer of legitimacy that encourages victims to act without proper verification.

Evidence
VirusTotal scanned the domain on 2026-10-26 and recorded two suspicious detections out of 92 engines with no malicious verdicts. Google Safe Browsing checked the same day and did not flag the site. urlscan.io captured a 200 response on 2026-10-26; its machine‑learning engine assigned a malicious score of 97 while the overall verdict was non‑malicious. PhishDestroy’s internal blocklist contains the domain, external blocklists reported zero hits, and OTX listed four pulses referencing the domain as of 2026-10-26.

Infrastructure
The domain was registered with Dynadot Inc on 2026-09-18, giving it an age of 38 days at first sighting. It was observed to resolve to IP 158.94.210.119, which belongs to Omegatech LTD in the Netherlands, and the Let’s Encrypt TLS certificate was valid from 2026-09-27 to 2026-12-26. Open ports 22, 80 and 443 were noted and DNSSEC was not enabled.

What to do
Visitors who entered credentials or personal information should change those credentials immediately and monitor accounts for unauthorized activity. Defenders should block or monitor traffic to zilverrekenisdom.net and review internal logs for any connections to this exact domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a179d6-0445-745e-b51b-71b9511a8bc8/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2349d17a-7653-47f4-abef-f2fb4148d699
URLQuery report: https://urlquery.net/report/2a234ec6-53ea-4f22-886d-92427b0b465f
Stored capture screenshot: https://i.ibb.co/Y4J6jBm6/f1ae5b141501.png
Cloudflare Radar screenshot (2026-10-26T20:12:18Z): https://screenshots.phishdestroy.io/cf/2349d17a-7653-47f4-abef-f2fb4148d699.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/2a234ec6-53ea-4f22-886d-92427b0b465f.png
VirusTotal report: https://www.virustotal.com/gui/domain/zilverrekenisdom.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=zilverrekenisdom.net
Archived copy: https://web.archive.org/web/20261026201225/https://zilverrekenisdom.net/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:50:11 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Y4J6jBm6/f1ae5b141501.png
  Captured: 2026-10-26 20:11:48 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a179d6-0445-745e-b51b-71b9511a8bc8.png
  Captured: 2026-10-26 20:11:48 UTC
  Source report: https://urlscan.io/result/01a179d6-0445-745e-b51b-71b9511a8bc8/
- URLScan · 2026-09-22: https://screenshots.phishdestroy.io/us/01a0c7ef-8bf2-72b9-92bd-f48662794912.png
  Captured: 2026-09-22 07:06:07 UTC
  Source report: https://urlscan.io/result/01a0c7ef-8bf2-72b9-92bd-f48662794912/
  SHA-256: 044a0146a3c0177a35502331695b9f06a79788a10c8be0bac0c1222d59c81e0d
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179d2-ef33-7129-886a-1af3fc202555.png
  Captured: 2026-10-26 20:09:01 UTC
  Source report: https://urlscan.io/result/01a179d2-ef33-7129-886a-1af3fc202555/
  SHA-256: 64c8b014b764f81e6f8181295369bc6965130ab8220098f74e7b0e728588b992
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2349d17a-7653-47f4-abef-f2fb4148d699.png
  Captured: 2026-10-26 20:12:18 UTC
  Source report: https://radar.cloudflare.com/scan/2349d17a-7653-47f4-abef-f2fb4148d699
  SHA-256: 1d4114aa619459c00d963e31530ef7a14aef92c6d3dcd4c1d7a569328382c0e8
- URLQuery: https://screenshots.phishdestroy.io/uq/2a234ec6-53ea-4f22-886d-92427b0b465f.png
  Source report: https://urlquery.net/report/2a234ec6-53ea-4f22-886d-92427b0b465f
  SHA-256: 0b3bdf2c34a7cc88dffbbde920098705a8a6eb104d7861070c8e54adbc0ce2c1

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:12:31Z",
        "uuid": "01a179d6-0445-745e-b51b-71b9511a8bc8",
        "scanned_at": "2026-10-26T20:10:43Z",
        "final_url": "https://zilverrekenisdom.net/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://zilverrekenisdom.net/",
                "from": "http://zilverrekenisdom.net/",
                "status": 307
            },
            {
                "to": "http://zilverrekenisdom.net/",
                "from": "https://zilverrekenisdom.net/",
                "status": 307
            },
            {
                "to": "https://zilverrekenisdom.net/",
                "from": "http://zilverrekenisdom.net/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "c9154ceb8f248a3af969ea3e992e6f1d5f22f19f607e99c9dc87be2a584dcff2",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "zilverrekenisdom.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "zilverrekenisdom.net",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-26T21:31:20Z",
            "valid_from": "2026-09-27T21:31:21Z"
        },
        "domain_age_days": 38,
        "apex_age_days": 38,
        "tls_age_days": 28,
        "tls_valid_days": 89,
        "requests": 10,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T20:19:24Z",
        "uuid": "2349d17a-7653-47f4-abef-f2fb4148d699",
        "scanned_at": "2026-10-26T20:12:18Z",
        "final_url": "https://zilverrekenisdom.net/",
        "status": 200,
        "history": [
            {
                "url": "https://zilverrekenisdom.net/",
                "status": 200
            }
        ],
        "dom_hash": "5a5e6b337986d03e6f54b4ac2d075b45d86b42342dd498c0ba45051cca2b90dd",
        "doc_hash": "c0a17c41b448c312e16893192d7abff2293d0d960852c0fbff6718b997108ff9",
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Scam",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "zilverrekenisdom.net",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-18T18:34:49Z",
            "updated": "2026-09-27T20:36:49Z",
            "expires": "2027-09-18T18:34:49Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:43:43Z",
        "analysis_at": "2026-10-26T07:33:17Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 2,
            "undetected": 35
        },
        "detections": {
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "spam"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)"
        },
        "registrar": "Dynadot Inc",
        "created": "2026-09-18T18:34:49Z",
        "expires": "2027-09-18T18:34:49Z",
        "updated": "2026-09-27T20:36:49Z",
        "first_seen": "2026-09-18T19:07:31Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.zilverrekenisdom.net",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-26T08:23:38Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "zilverrekenisdom.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6d29a2a24f16d987e0123e394ad288cf5c4",
            "sha256": "066db442c5291381f50fdb19b1841ab82317b55de1907cb5abea11f514ac501f",
            "subject": "zilverrekenisdom.net",
            "valid_to": "2026-12-26T21:31:20Z",
            "valid_from": "2026-09-27T21:31:21Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-09-18T18:34:49Z",
            "updated": "2026-09-27T20:36:49Z",
            "expires": "2027-09-18T18:34:49Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-18T18:34:49Z",
                "last changed": "2026-09-27T20:36:49Z",
                "registration": "2026-09-18T18:34:49Z",
                "registrar expiration": "2027-09-18T18:34:49Z",
                "last update of RDAP database": "2026-10-23T11:14:58Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:12:55Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "zilverrekenisdom.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T20:12:25Z",
            "first": "2026-09-18T23:34:53Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0.05,
            "avg_page_bytes": 15351
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://zilverrekenisdom.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Zilver Rekenisdom — AI-platform voor slimme portefeuille-analyse",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Zilver Rekenisdom is het AI-platform dat marktdata vertaalt naar directe, leesbare aanbevelingen voor uw portefeuille. Ontdek hoe u in drie stappen een gefundeerd beleggingsbesluit neemt.",
            "canonicalUrl": "https://zilverrekenisdom.net/"
        },
        "trackers": {
            "requests": 5
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 317,
                "tls": 102,
                "wait": 119,
                "connect": 80,
                "download": 152
            },
            "response_ms": 770
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 81232,
            "co2_grams": 0.003,
            "cleaner_than": 26
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "zilverrekenisdom.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "zilverrekenisdom.net"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.zilverrekenisdom.net\", \"serial\": 2026092701, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://zilverrekenisdom.net"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Priority Hints",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-18T18:34:49Z",
            "updated": "2026-09-27T20:36:49Z",
            "expires": "2027-09-18T18:34:49Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```