Security Report: batikllive22.space - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7a7c6a4c-126d-41df-8214-1bdbefdab253 Domain and IP registration (RDAP)/api/v1/rdap/7a7c6a4c-126d-41df-8214-1bdbefdab253 Certificate Transparency/api/v1/ct/batikllive22.space How often this domain was scanned/api/v1/domain/stats/batikllive22.space Scan history for this domain/api/v1/domain/history/batikllive22.space?limit=15

This website contacted 10 IPs in 2 countries across 7 domains to perform 46 HTTP transactions. The main domain is batikllive22.space and was registered 5 years ago.

Submitted URL: https://batikllive22.space

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed malware/scam: a fake Cloudflare 'verification' page using the ClickFix trick to make visitors paste attacker commands into Windows Terminal, backed by a malware IoC on the domain and 19 CRITICAL EtherHiding exfiltration IDS alerts. Do not interact.

Risk Factors (6)

Known malicious ClickFix social-engineering kit instructing users to paste attacker commands into Windows Terminal/PowerShell

Primary domain flagged as malware ('clearfake') by two independent threat-intelligence feeds

19 CRITICAL IDS alerts for EtherHiding Exfil M2 (network trojan / malware exfiltration)

Impersonates Cloudflare's bot-verification screen on a domain that is not Cloudflare

Gambling ('SLOT GACOR' / maxwin) landing content funneling users to an external off-site link

Page attempts to get visitors to execute code locally; typical of ClearFake/EtherHiding compromise chains

Domain age information unavailable

Details

Page Title

SLOT GACOR - KLIK! SLOT FIX GAMPANG MAXWIN !

Scan Type

public

Domain Name Analysis

Within the .space top-level domain, 'batikllive22.space' is registered and has no subdomain. The registrable portion 'batikllive22' spans 12 characters holding 4 vowels versus six consonants; bonus characters include two digits. Word splitting yields 4 words: batik, l, live, 22. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.87s

Total Load Time

149 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:48%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:id

Text Length:1,260 chars

Detector Agreement:75%

Language mismatch: Declared as id but detected as en

Website Classification

Primary Category

technology software77% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

77%

gambling betting

70%

documentation technical

60%

phishing scam

45%

government public service

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.20.132Google · CDN	United States	AS15169Google LLC
4	146.75.121.137Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	104.16.78.6Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.79.6Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
46	10	-	-