Security Scan Report: realhair.com.tr

Redirected to:
https://www.amazon.de/?subId=M7685511902222352385&linkId=fbdfb9b1ea167...
Site favicon
Submitted: Sep 14, 2026, 9:47:36 PMCompleted: Sep 14, 2026, 9:51:51 PMpubliccompleted

This website contacted 25 IPs in 4 countries across 13 domains to perform 183 HTTP transactions. The main domain is amazon.de and was registered 10 years ago.

Submitted URL: https://realhair.com.tr

Effective URL:

https://www.amazon.de/?subId=M7685511902222352385&linkId=fbdfb9b1ea167...
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Content-malware (stealer) intel flags the entry domain realhair.com.tr (single-source, unverified); it redirects via affiliate links to genuine Amazon.de. No credential/payment form served, but the redirector domain warrants caution.

Risk Factors
Content-malware (stealer) threat-intel match on the scanned primary domain
Unranked redirector domain funneling traffic via affiliate parameters
Suspicious look-alike third-party external domains (.shop, pages.dev) loaded by the page
Domain age information unavailable

Details

Page Title

Amazon.de: Günstige Preise für Elektronik & Foto, Filme, Musik, Bücher, Games, Spielzeug & mehr

Scan Type

public

Domain Name Analysis

Domain 'realhair.com.tr' uses the Turkish country-code top-level domain (.com.tr) while skipping any subdomain. The registrable portion 'realhair' spans 8 characters containing four vowels alongside four consonants. Segmentation suggests two words: real, hair. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://realhair.com.tr

Page Load Overview

3.11s
Total Load Time
4.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-de
Text Length:18,252 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping51% confidence
Type: webapp
Method: ml+structural

All Detected Categories

e-commerce shopping
51%
forum
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1403.161.83.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
15188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
952.222.237.117Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
73.253.180.115Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
754.228.132.114Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
73.253.166.86Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
752.222.136.127Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
718.245.60.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
73.254.239.211Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
718.245.60.16Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
18325--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CA4C5B1E1A5303762274DEAB1797B5E10E2D326E7260AC4FEF907B813CBD67640946C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:cZ2wwD+Y48nkAxWzHqYJV5lvTALhFLvQAL5h1lsqNMk6U3fecIpDz4fkitlz3x0p:JwwD+Y48nkAxWzHqYJV5lvTALhFLvQAk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:460378:yRFDCI6mkJBwiHuQnUeMQAtCIIAAQoRyJA6IC0AJgCgSCG8KBMgBDzKAlN1wCYeshQgMJlnEI8OkhgBIWQAB4RDzIZsEGMIG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00819181ffffffff
Perceptual Hash:ef4f1717524849c9
Difference Hash:6967532b2f333373
Wavelet Hash:00008181ffffc3ff
Color Hash:#8987c5

Scan History

Scan history not available

Unable to load historical scan data