mass.report
Scan Intelligence Report0/100
low Risk
www.svensktaluminium.se
https://www.svensktaluminium.se
IP
185.15.121.100 · Ilait AB
Location
Kungälv, Sweden
Domain Age
—
HTTP
200 · 25.5s
SSL
Valid· E8, Let's Encrypt, US
Status
COMPLETED
Visual Evidence
Zoom
Title: "Süperbahis Giriş - Süperbahis Güncel Adres Burada - Süperbahis Platforma Hemen Bağlan"
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Süperbahis
Vendors
30/31
Status
partial
✓ yandex✓ avast✓ avg✓ sophos✓ chainpatrol✓ netcraft✓ drweb✓ apwg✓ urlquery✓ emsisoft✓ phishreport✓ microsoft✓ bitdefender✓ brightcloud✓ apple✓ openphish✓ urlscan✓ spamhaus✓ cisa✓ eset✓ isitphish✗ norton✓ urlabuse✓ phishtank✓ virustotal✓ polyswarm✓ google✓ kaspersky✓ mcafee✓ threatyeti✓ fortiguard
Registered-domain escalation
Submit svensktaluminium.se as the primary IOC, enriched with evidence from hostile subdomains like www.svensktaluminium.se.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Süperbahis
Unknowngambling · 6/3/2026
Summary
The page at www.svensktaluminium.se presents itself as Süperbahis, a betting platform. It contains branding and content associated with Süperbahis, including promotional text and images. There are no forms or credential capture mechanisms observed in the static HTML, but the presence of JavaScript suggests potential dynamic content that could include forms.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸Distinctive asset clues: S%C3%BCperbahis-bahis-casino.jpg.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 3
Hosts: 1
Domains: 1
Attack Techniques (1)
Dynamic content potentially capturing credentials
Indicators of Compromise (0)
No specific IOCs identified in source
Risk AssessmentUsed in abuse reports
The site appears to impersonate the Süperbahis betting platform, utilizing branding and content that aligns with the official service. While no direct credential harvesting mechanisms were observed, the use of JavaScript may indicate dynamic forms that could capture user data. Given the potential for abuse, further monitoring is recommended to assess the site's activities.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API