ScanMalware.com

Security Scan Report: hakverdi.net

Submitted: Sep 13, 2026, 1:47:45 AMCompleted: Sep 13, 2026, 1:48:49 AMpubliccompleted

Summary

This website contacted 9 IPs in 3 countries across 7 domains to perform 2 HTTP transactions. The main domain is hakverdi.net and was registered 29 years ago.

Submitted URL: https://hakverdi.net

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed ClickFix FakeCAPTCHA malware page impersonating Cloudflare; it tricks users into pasting a malicious command into Windows Run. Do not follow its steps — avoid entirely.

Risk Factors
Known malicious ClickFix/FakeCAPTCHA kit detected by name with analyst-vetted roster anchor
Fake CAPTCHA verification luring users to execute a clipboard-pasted command via Win+R
Critical IDS signatures for ClickFix PowerShell delivery and landing page
Threat-intelligence malicious reputation on the primary domain (multi-source corroborated)
Impersonates Cloudflare branding ('Ray ID', 'Platform performance and security Cloudflare') on a non-Cloudflare domain
Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(60%)

Domain Information

The domain 'hakverdi.net' uses the network infrastructure generic top-level domain (.net) and has no subdomain. The core label 'hakverdi' covers 8 characters containing three vowels alongside five consonants. Word splitting yields two words: hak, verdi. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hakverdi.net

Page Load Overview

29.94s
Total Load Time
8
HTTP Requests
7
Domains
122 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:702 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software60% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
60%
documentation technical
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8195.154.239.25Paris, Île-de-France, France
AS12876Scaleway SAS
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0193.3.167.202Turkey
AS42724TALIDO Bilisim Teknolojileri Sanayi ve Ticaret Anonim Sirketi
0142.251.151.119Google · CDNUnited States
AS15169Google LLC
0142.251.153.119Google · CDNUnited States
AS15169Google LLC
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.250.154.103Google · CDNUnited States
AS15169Google LLC
0192.178.183.106Google · CDNUnited States
AS15169Google LLC
0195.154.239.26Paris, Île-de-France, France
AS12876Scaleway SAS
89--

Page Statistics

8
Requests
6
Unique Domains
135.4 KB
Total Size

Detected Technologies2

Cloudflare
50%
Cloudflare Bot Management
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E228522A6601017BA57C0E8B8A3E79B32328203D7455A797DED15A0DF8FDD65EB318C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1rKtfRJslfHR1i5k0TjVAdfn3jPxOz7SX5A2RI1MbUbj6d+uf0RNMtY/8xiZj3xp:1rKDCxlPX60pY9szC6ieW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10033:MaAGFlBiCCQESCQ7JYESIwsBnCQCEhEyAJpEIakeCiSaMSCyzBAiQPkSx6PbKBwQIAWmEUeJCENBDISggGAIDKBABggCJAQT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3c3cfe7ffffff
Perceptual Hash:b03898c3c3cdc7c7
Difference Hash:109616124c000000
Wavelet Hash:c0c0c0c8c0f0f0f0
Color Hash:#3b3a78

Other Hashes

Crop Resistant:109616124c000000

Scan History

Scan history not available

Unable to load historical scan data