Security Report: www.guncelbetvoygiris.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/463ea491-918f-4d34-8614-1634df8faabe Domain and IP registration (RDAP)/api/v1/rdap/463ea491-918f-4d34-8614-1634df8faabeHow often this domain was scanned/api/v1/domain/stats/guncelbetvoygiris.com Scan history for this domain/api/v1/domain/history/guncelbetvoygiris.com?limit=15

This website contacted 4 IPs in 3 countries across 4 domains to perform 23 HTTP transactions. The main domain is guncelbetvoygiris.com and was registered 8 months ago.

Submitted URL: https://www.guncelbetvoygiris.com/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed ClickFix/EtherHiding malware page posing as the official Betvoy address: a fake Cloudflare check tells Windows users to paste commands into Terminal while an obfuscated script pulls its payload from a Polygon contract. Do not open.

Risk Factors (5)

Injected ClickFix overlay masquerading as a Cloudflare connection check

Blockchain-assisted payload delivery (EtherHiding) via Polygon contracts and RPC endpoints

Obfuscated JavaScript concealing known-attacker hosts rewritten at runtime

Domain and URL both appear on malware threat-intel feeds (multi-source corroborated)

Unranked domain claiming to be the 'resmi' (official) address of the Betvoy betting brand

Domain age information unavailable

Details

Page Title

Betvoy Giriş | Güncel Adresi | Resmi Betvoy Adresi

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.guncelbetvoygiris.com' on the commercial generic top-level domain (.com) with subdomain 'www'. The registrable portion 'guncelbetvoygiris' spans 17 characters with six vowels and 11 consonants. Breaking it apart gives six words: gun, cel, bet, voy, gir, is. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.91s

Total Load Time

884 KB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:5,159 chars

Detector Agreement:80%

Website Classification

Primary Category

gambling betting56% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

56%

entertainment media

55%

adult content

38%

corporate

35%

cryptocurrency blockchain

26%

Detected Features

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	66.33.215.136	Schiphol, North Holland, Netherlands	AS22611InMotion Hosting, Inc.
5	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
23	4	-	-