Security Report: klub-neratovice.cz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/675c0c4b-8b99-4433-8ee7-6c115f678372 Domain and IP registration (RDAP)/api/v1/rdap/675c0c4b-8b99-4433-8ee7-6c115f678372 Certificate Transparency/api/v1/ct/klub-neratovice.cz How often this domain was scanned/api/v1/domain/stats/klub-neratovice.cz Scan history for this domain/api/v1/domain/history/klub-neratovice.cz?limit=15

This website contacted 8 IPs in 3 countries across 9 domains to perform 30 HTTP transactions. The main domain is klub-neratovice.cz and was registered 18 years ago.

Submitted URL: https://klub-neratovice.cz

Effective URL:

https://www.klub-neratovice.cz/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised Czech club domain serving injected gambling spam plus a ClickFix kit: a fake Cloudflare 'Human Verification' overlay directs Windows visitors to paste Terminal commands, with CRITICAL EtherHiding malware exfiltration alerts.

Risk Factors (7)

Known malicious ClickFix Win+X Terminal overlay kit injected into the page (CRITICAL phishing)

High-precision YARA match ClickFix_WinX_Overlay_Kit with key-press animation element IDs

Deceptive fake 'Human Verification' / Cloudflare security-check screen designed to make visitors execute Terminal commands

CRITICAL IDS alerts for EtherHiding malware exfiltration

Page JavaScript connects to multiple blockchain RPC nodes used for payload/exfil transport

Legitimate club domain hijacked and filled with unrelated multilingual casino/gambling SEO spam

Overlay impersonates Cloudflare branding and shows a fabricated Ray ID

Domain age information unavailable

Details

Page Title

SEN Production | Budoucnost je ve Vašich snech

Scan Type

public

Favicon Hash

MMH3: -1622910476

MD5: 19bf6aecee485450105e8c310ab99088

Domain Name Analysis

Within the Czech country-code top-level domain (.cz), 'klub-neratovice.cz' is registered and has no subdomain. The core label 'klub-neratovice' covers 15 characters containing 6 vowels alongside 8 consonants, along with one hyphen. Segmentation suggests 5 words: klub, ner, a, to, vice. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.71s

Total Load Time

818 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:40%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:cs

Text Length:5,371 chars

Detector Agreement:75%

Language mismatch: Declared as cs but detected as en

Website Classification

Primary Category

gambling betting99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

99%

entertainment media

91%

finance banking

63%

adult content

36%

education learning

34%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	91.239.200.63	Czech Republic	AS60606PRO-ZETA a.s.
3	142.251.13.95Google · CDN	United States	AS15169Google LLC
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
30	8	-	-