Security Report: tmm35.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1609a158-bef9-4b76-af7b-414540630d87 Domain and IP registration (RDAP)/api/v1/rdap/1609a158-bef9-4b76-af7b-414540630d87 Certificate Transparency/api/v1/ct/tmm35.com How often this domain was scanned/api/v1/domain/stats/tmm35.com Scan history for this domain/api/v1/domain/history/tmm35.com?limit=15

This website contacted 20 IPs in 2 countries across 14 domains to perform 57 HTTP transactions. The main domain is tmm35.com and was registered 30 years ago.

Submitted URL: https://tmm35.com

Effective URL:

https://www.tmm35.com/

Redirected

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking Turkish HVAC site whose page has been compromised and serves an analyst-vetted ClickFix/EtherHiding loader that pulls its next stage from a blockchain contract; Malware Distribution confirmed.

Risk Factors (4)

Known malicious ClickFix/EtherHiding kit injected into the page

CRITICAL IDS malware alert for EtherHiding exfiltration

Obfuscated JavaScript resolving loader stages from a blockchain smart contract

Content-malware Indicators of Compromise on the primary domain and on a loaded third-party resource

Domain age information unavailable

Details

Page Title

Thermo Mekanik - İHTİYACINIZ OLDUĞUNDA YANINIZDAYIZ

Scan Type

public

Favicon Hash

MMH3: -9730116

MD5: 1197e2d276e3ef598995fa0b41226563

Domain Name Analysis

The domain 'tmm35.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 5 characters in 'tmm35' with 0 vowels and three consonants, notching two digits. Splitting it apart reveals three words: t, mm, 35. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.14s

Total Load Time

2.0 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:1,555 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical40% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

40%

corporate

35%

technology software

30%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	93.89.232.21	Turkey	AS51557Isimtescil Bilisim A.S.
2	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
2	104.26.12.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.152.4Google · CDN	United States	AS15169Google LLC
2	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
2	172.67.68.204Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.72.64Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.154.4Google · CDN	United States	AS15169Google LLC
2	142.251.153.4Google · CDN	United States	AS15169Google LLC
57	20	-	-