Security Scan Report: ankarakampalani.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 45 HTTP transactions. The main domain is ankarakampalani.com and was registered 6 months ago.

Submitted URL: https://ankarakampalani.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised camping site (ankarakampalani.com) flagged as clearfake malware plus CRITICAL EtherHiding IDS alerts and a fake Cloudflare verification lure that instructs users to run a keypress payload. Do not visit or interact.

Risk Factors (5)
Primary domain flagged as malware (clearfake) by multi-feed threat intelligence
CRITICAL IDS alerts for EtherHiding malware exfiltration
Fake Cloudflare/CAPTCHA 'human verification' overlay directing the user to run a keypress sequence (malware installation lure)
Blockchain RPC contract calls used for hidden payload retrieval (EtherHiding)
No indexable legitimate business purpose for the injected verification overlay on a camping-site page
Domain age information unavailable

Details

Page Title

Ankara Kamp Alanı | Karavan Park Ankara | Havuzlu Karavan Park

Scan Type

public

Domain Name Analysis

Domain 'ankarakampalani.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'ankarakampalani' stretches across 15 characters holding seven vowels versus eight consonants. Splitting it apart reveals three words: ankara, kampala, ni. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ankarakampalani.com

Page Load Overview

4.99s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:2,845 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media69% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
69%
government public service
26%
travel tourism
25%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10185.136.206.17Istanbul, Istanbul, Turkey
AS47516Dehost Internet Ve Bilisim Teknolojileri Sanayi Ticaret Limited Sirketi
5142.251.13.95Google · CDNUnited States
AS15169Google LLC
5104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
458--

Detected Technologies8

WordPressv7.1.3
100%
JQueryv3.7.1
100%
Bootstrapv7.1.3
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15783D533C9B41827665D83949231772E99C2F50BE619849CBBBC72985F8FDD7043FA88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/zypcV84slniI9bmC3epoAyaRC6t9AhCOGsJEcG84ITuxFyXRVE:/eqV84spGLC6vAhCOGsJ9G9ITuxFyXbE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:85643:IKACCkIy4Kg5CMfy5QgABKK0lEYssAAgZpGBSVcyUIAFzDwRQCGIEBoE9OYHSGlDAALsVIKChERAAByEAQAwcxGG4YgBAwhF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffe6e6ffe781
Perceptual Hash:f554294227a39df1
Difference Hash:8498200c0c004a43
Wavelet Hash:0000fee6e6ffe381
Color Hash:#a1d279

Other Hashes

Crop Resistant:8498200c0c004a43

Scan History

Scan history not available

Unable to load historical scan data