Security Report: haberinolsunaydin.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0922225e-ad54-4585-a1b3-aa4c807471f5 Domain and IP registration (RDAP)/api/v1/rdap/0922225e-ad54-4585-a1b3-aa4c807471f5How often this domain was scanned/api/v1/domain/stats/haberinolsunaydin.com Scan history for this domain/api/v1/domain/history/haberinolsunaydin.com?limit=15

This website contacted 13 IPs in 3 countries across 12 domains to perform 115 HTTP transactions. The main domain is haberinolsunaydin.com and was registered 2 years 1 month ago.

Submitted URL: https://haberinolsunaydin.com

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

No phishing forms or impersonation, but the page loads multiple malware-flagged scripts and triggers CRITICAL EtherHiding exfiltration alerts — a compromised news site likely serving malicious injected content.

Risk Factors (5)

Six CRITICAL IDS malware alerts for EtherHiding exfiltration behavior on the scanned page

Blockchain RPC domains (polygon.gateway.tenderly.co, 1rpc.io, polygon-public.nodies.app) contacted with smart-contract get() requests typical of hidden C2

Multiple corroborated malware IoCs among third-party resources loaded by the page (interseq.at, javascript.skin, cosmical2049.com)

Scanned URL and primary domain flagged as malware by threat intelligence feeds

Outbound link to an additional clearfake-flagged domain

Domain age information unavailable

Details

Page Title

Efelerhaber - Aydın Haberleri - Haberin Olsun Aydın - Efeler Haber - Aydın Haberleri - Haberin Olsun Aydın

Scan Type

public

Favicon Hash

MMH3: -29965639

MD5: 47d4675a2231f268824306812f2df558

Domain Name Analysis

You're looking at domain 'haberinolsunaydin.com' on the commercial generic top-level domain (.com). Its registrable label 'haberinolsunaydin' stretches across 17 characters split between seven vowels and ten consonants. It segments into seven words: haber, in, ol, sun, a, yd, in. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

18.44s

Total Load Time

9.8 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:21,848 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism57% confidence

Type: spa

Method: ml+structural

All Detected Categories

news media journalism

57%

adult content

45%

real estate property

37%

social media network

35%

news/blog

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	104.247.173.253	Turkey	AS42846GNET Internet Telekomunikasyon A.S.
8	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.14.97Google · CDN	United States	AS15169Google LLC
8	192.0.73.2	San Francisco, California, United States	AS2635Automattic, Inc
8	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	216.239.34.36Google · CDN	United States	AS15169Google LLC
8	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
115	13	-	-