Veiligheidsscore
12 / 100
De veiligheidsscore combineert technische controles, reputatiesignalen, websitegeschiedenis, scam-informatie en AI-analyse.
Gezaghebbende scam-informatie overschrijft de kopscore zodat advies voorzichtig blijft wanneer feeds afwijken van het model.
Signalen achter uw score
Bevestigd phishingrisico
Availability: limited_inspection · Website responded, but some page details could not be fully inspected during this scan.
Inspection: failed · dns=true · tls=false · botProtection=true · parserFailure=false · contentLength=0 · extractionReason=Website responded to DNS/TLS checks, but Fraudly could not complete a public page fetch during this scan.
Matches uit scam-informatie
Serious matches from known phishing, malware, or public scam-warning sources. Provider names appear below each row.
Google-dreigingswaarschuwing
Google Web Risk heeft deze URL als mogelijk onveilig gemarkeerd.
Bron: Google Web RiskBetrouwbaarheid bron: high
Gedetecteerde risicopatronen
Additional patterns worth a closer look before you pay or sign in—not proof on their own.
Geen extra geprioriteerde risicorijen buiten gecureerde lijstmatches.
Nuttige signalen en observaties
Supporting checks in plain language. “Not found” means we did not see a report in that source during this scan.
Subdomain submitted; root registration also checked
The submitted host milogin2026ecuad0r.zya.me is a subdomain. Fraudly checks RDAP/domain-age on zya.me because ownership and registration belong to the registrable root domain.
Bron: Fraudly hostname analysisBetrouwbaarheid bron: high
No police list match found
No direct domain match was found on the public police trader-warning list checked in this scan.
Bron: Dutch Police (public pages)Betrouwbaarheid bron: low
Check unavailable
RDAP lookup overrun or error: WhoisXML guardrails unavailable (20260618070000_whoisxml_usage_guardrails): ❌ Migration missing - falling back to memory cache. Run: npm run db:migrate:deploy
Bron: RDAPBetrouwbaarheid bron: low
Geen bekende phishingmelding gevonden
Deze website stond niet op bekende phishinglijsten in deze scan. Nieuwe scam-sites verschijnen snel—dit is één signaal onder meer.
Bron: OpenPhishBetrouwbaarheid bron: medium
URLhaus unavailable
HTTP 401
Bron: URLhausBetrouwbaarheid bron: low
Domein & registratie
Het ingediende adres is een subdomein. Fraudly controleerde ook het geregistreerde domein omdat leeftijd en eigendom bij het hoofddomein horen.
- Gecontroleerde URL/hostnaam: milogin2026ecuad0r.zya.me
- Geregistreerd domein: zya.me
- Registratiedatum: onbekend
- Domeinleeftijd: Unavailable
- Registrar: onbekend
- Land: onbekend
- Vervaldatum: onbekend
- Privacy / afgeschermde eigenaarsgegevens: nee / onbekend
- Subdomeinanalyse: Mogelijk risicovolle formulering gevonden (milogin2026ecuad0r).
Bron: RDAP (rdap.org)
Redirect analysis
- Original URL: https://milogin2026ecuad0r.zya.me/
- Final URL: https://milogin2026ecuad0r.zya.me/
- Final domain: milogin2026ecuad0r.zya.me
- Redirect count: 0
- Crossed registrable domain: nee
- Redirect resolver note: redirect_fetch_failed
Beveiligingscontroles (HTTPS / certificaten)
- HTTPS/TLS reachable: ja
- Certificate trusted in probe: nee
- Possibly self-signed / untrusted: nee / onbekend
- Issuer: ZeroSSL
- Expiry: 2025-10-28T23:59:59.000Z
Bron: TLS certificate check
Technical source details
Raw provider names (OpenPhish, URLhaus, Google Web Risk, RDAP, etc.) for this scan. “Matched” means that source reported something relevant.
Google Web Risk flagged this URL as potentially unsafe.phishingmatched
This URL appears in Google's threat intelligence for malware, phishing, or unwanted software (SOCIAL_ENGINEERING).
Bron: Google Web Risk · severity: danger · betrouwbaarheid: high
TLS certificate validation issuesslmatched
HTTPS is reachable but the certificate did not validate as trusted or may be expired. Issuer: ZeroSSL. Expiry: 2025-10-28T23:59:59.000Z.
Bron: TLS certificate check · severity: warning · betrouwbaarheid: medium
Subdomain submitted; root registration also checkeddomainno match
The submitted host milogin2026ecuad0r.zya.me is a subdomain. Fraudly checks RDAP/domain-age on zya.me because ownership and registration belong to the registrable root domain.
Bron: Fraudly hostname analysis · severity: info · betrouwbaarheid: high
No Police page string matchgovernmentno match
No direct domain string overlap was detected in lightly cached excerpts of the referenced politie.nl pages. Missing a hit is not proof a shop is trustworthy.
Bron: Dutch Police (public pages) · severity: info · betrouwbaarheid: low
Check unavailabledomainno match
RDAP lookup overrun or error: WhoisXML guardrails unavailable (20260618070000_whoisxml_usage_guardrails): ❌ Migration missing - falling back to memory cache. Run: npm run db:migrate:deploy
Bron: RDAP · severity: info · betrouwbaarheid: low
No OpenPhish match found in this snapshotphishingno match
No overlapping entry was found in the fetched OpenPhish feed for this check window. This does not prove the site is safe.
Bron: OpenPhish · severity: info · betrouwbaarheid: medium
URLhaus unavailablemalwareno match
HTTP 401
Bron: URLhaus · severity: info · betrouwbaarheid: low
Reputatieverrijking
Optionele bredere reputatiepass wanneer beschikbaar—naast de snelle basisprobes.
Geen verrijkt reputatieprofiel gevonden. Dat beperkt context; het bewijst niet dat de site onveilig is.
Snelle reviewprobes (basisscan)
Lichte directorycontroles voor het model—problemen hier beschrijven onze snapshot, niet de eerlijkheid van de winkel.
Trustpilot · Unavailable
UnavailableTrustpilot
No public reviews found
Checked, no public reviews found
Google Reviews · Not confidently linked
Limited dataGoogle Reviews
We found possible review data, but could not confidently link it to this domain.
Not confidently linked
We found possible review data, but could not confidently link it to this domain.
- No reliable public review data found
No reliable public review data found; independent customer review data could not be verified.
- Public review data unavailable for this check.
Source availability (neutral)
- Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
- Indexed review snippets probe: snapshot unavailable in this crawl (limits confidence only).
Raw review snapshots
Trustpilot raw snapshot: not available in current payload.
Google reviews raw snapshot: not available in current payload.
Fulfillment-signalen
Dropshipping: unlikely · China-linked fulfillment: unlikely · Local stock/production: unlikely · Confidence: low · Score nudge: 0
- Marketplace terms detected: unlikely
- Third-party seller language detected: unlikely
- Cross-border shipping detected: unlikely
- Supplier fulfillment detected: unlikely
- Separate shipment language detected: unlikely
- International shipping detected: unlikely
- Fulfillment confidence: low · Fulfillment score nudge: 0
- Not enough website text to assess supply chain.
Scoredetails (geavanceerd)
Composite model uses raw impacts × confidence weights on the server. Positive numbers push the risk score up; negative numbers pull it down. Neutral rows are explanatory only — they must not be read as endorsement.
Applied trust-score cap after identity guardrails: 100/100 displayed trust.
Gecombineerde scoresignalen (reviews, reputatie, feeds, fulfillment…)
Matches uit scam-informatie
- Google Safe Browsing match (+45 raw · high confidence) — Google Safe Browsing reported phishing (exact url).
Website- en technische observaties
- No matched Google listing (+0 raw · high confidence) — No Google Places listing matched this domain; review impact is neutral (not a penalty).
Gedetecteerde risicopatronen
- Unusually long domain (+10 raw · medium confidence) — The hostname is unusually long, which is common in phishing or throwaway shops.
- Suspicious subdomain wording (+5 raw · medium confidence) — Subdomain labels include risky wording (milogin2026ecuad0r).
- Suspicious subdomain wording (+4 raw · medium confidence) — Subdomain terms like milogin2026ecuad0r are often used in impersonation/login lures.
- TLS certificate validation issue (+12 raw · medium confidence) — Certificate failed validation against trust anchors.
Onvolledige of ontbrekende gegevens
- Domain registration age unavailable (+0 raw · low confidence) — Domain registration age could not be verified during this scan. Some registries temporarily limit or omit registration data. This does not mean the website is suspicious, and it was not treated as a risk signal.
- Domain ownership could not be verified from public registration data (+1 raw · low confidence) — WHOIS/RDAP did not expose corroboratable registrant signals in this crawl. That is common and mainly reduces how confidently we can score—not evidence of impersonation by itself.
Gewicht scam-informatie (model)
Matches uit scam-informatie
- Google Safe Browsing match (+45 raw · high confidence) — Google Safe Browsing reported phishing (exact url). · Google Safe Browsing
Gedetecteerde risicopatronen
- Suspicious subdomain wording (+4 raw · medium confidence) — Subdomain terms like milogin2026ecuad0r are often used in impersonation/login lures. · RDAP (rdap.org)
- TLS certificate validation issue (+12 raw · medium confidence) — Certificate failed validation against trust anchors. · TLS certificate check
Notities reviewverzamelaar (neutraal)
Buckets distinguish provider errors, source outages, review-derived signals, and (rare) website crawler transparency—never merged with fraud intel.
- trustpilot_public · source_unavailable: Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
- google_indexed_snippets · source_unavailable: Indexed review snippets probe: snapshot unavailable in this crawl (limits confidence only).
Belangrijkste factoren uitgelegd
Gemengde notities uit patronen, scam-informatiescores en optionele AI—geen juridisch of financieel advies.
- AI risk signal: high
- Google Safe Browsing reported this URL as phishing (confirmed malicious).
- The domain name is unusually long, which is common in phishing patterns.
AI model used in this run: ja
