mass.report
Scan Intelligence Report0/100
low Risk
trend-it.es
https://trend-it.es/
IP
92.205.170.124 · Host Europe GmbH
Location
Frankfurt am Main, Germany
Domain Age
—
HTTP
200 · 33.3s
SSL
Valid· R13, Let's Encrypt, US
Status
COMPLETED
Visual Evidence
Zoom
Title: "Süperbahis Orjinal 2026 - Yenilenen Erişim Adresi ve Canlı Oyun Portalı"
Domain Intelligence: trend-it.es
Scanned 2 times since Apr 29, 2026, 09:09 AM UTC
ℹ Low (10)
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Trend-it
Vendors
30/31
Status
partial
✓ microsoft✗ norton✓ polyswarm✓ sophos✓ apwg✓ spamhaus✓ drweb✓ avast✓ eset✓ chainpatrol✓ avg✓ bitdefender✓ brightcloud✓ fortiguard✓ isitphish✓ cisa✓ apple✓ phishreport✓ yandex✓ emsisoft✓ phishtank✓ virustotal✓ urlscan✓ threatyeti✓ mcafee✓ kaspersky✓ openphish✓ netcraft✓ google✓ urlquery✓ urlabuse
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Trend-it.es
Unknowngambling · 6/3/2026
Summary
The page presents Süperbahis branding and content but is hosted at trend-it.es. Visual cues and metadata indicate impersonation of Süperbahis, a known betting site, with Turkish-language content and links to the Süperbahis-related assets hosted on unrelated domains (tr.superbahisgir.vip). The static HTML shows no forms, but SPA-style assets suggest potential credential collection via dynamic UI. The domain appears not to be the official Süperbahis domain, signaling impersonation rather than first-party abuse.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸POST targets observed during capture: https://csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3, https://csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb.
▸Distinctive asset clues: tccl.min.js, scc-c2.min.js, all.min.css, css2.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 20
Hosts: 8
Domains: 8
Attack Techniques (2)
Brand impersonation via visual cloning and Turkish language contentSPA-based credential capture risk due to dynamic form rendering in JavaScript bundles
Indicators of Compromise (1)
▸SPA behavior suspected: 0 static forms in HTML; 6 external scripts including tccl.min.js and scc-c2.min.js
Risk AssessmentUsed in abuse reports
The site presents strong impersonation signals of a known betting brand (Süperbahis) on a non-official domain trend-it.es. Visual branding, meta data, and Open Graph content align with Süperbahis, yet the canonical/alternate URL signals point to related but non-official domains (tr.superbahisgir.vip). The absence of static forms in HTML does not rule out credential collection, as SPA assets may render login interfaces dynamically. Given the mismatch between the brand presentation and the host domain, this is a phishing/credential-impersonation concern warranting further abuse action and monitoring.
Recommended Action
Block URL
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API