Security Scan Report: atteelektronik.com.tr

Submitted: Completed: publiccompleted
This website contacted 13 IPs in 4 countries across 10 domains to perform 132 HTTP transactions. The main domain is atteelektronik.com.tr and was registered 6 years ago.

Submitted URL: https://atteelektronik.com.tr

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking Istanbul TV repair site whose pages are compromised and inject ClearFake/EtherHiding and ClickFix AMOS stealer loaders; Safe Browsing and 4 critical IDS malware alerts confirm infection. Do not visit until cleaned.

Risk Factors (5)
Compromised WordPress site injecting ClearFake/EtherHiding blockchain-based loaders that resolve next-stage payloads from a smart contract
ClickFix social-engineering lure delivering the AMOS macOS infostealer to visitors
Obfuscated inline JavaScript hiding C2/RPC hosts (1rpc.io, polygon.gateway.tenderly.co, rpc-mainnet.matic.quiknode.pro) from casual inspection
Safe Browsing flags the page for Unwanted Software distribution
Loads multiple third-party domains with corroborated malicious reputation (ek clearfake cluster)
Domain age information unavailable

Details

Page Title

Atte Elektronik LG Anakart Tamiri ve TV Kart Servisi İstanbulother network

Scan Type

public

Domain Name Analysis

The domain 'atteelektronik.com.tr' uses the Turkish country-code top-level domain (.com.tr) while skipping any subdomain. The core label 'atteelektronik' covers 14 characters containing 6 vowels alongside 8 consonants. Tokenizing the label suggests five words: at, tee, lek, tron, ik. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://atteelektronik.com.tr

Page Load Overview

6.83s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:7,380 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media77% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
77%
documentation technical
47%
adult content
45%
corporate
35%
social media network
33%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1278.135.82.192Istanbul, Istanbul, Turkey
AS207326HostLAB Bilisim Teknolojileri A.S.
10208.115.201.238Frankfurt am Main, Hesse, Germany
AS46475Limestone Networks, Inc.
10142.250.154.95Google · CDNUnited States
AS15169Google LLC
10147.45.37.168Russia
AS203273NetCrafters OU
10142.251.20.97Google · CDNUnited States
AS15169Google LLC
10216.239.34.36Google · CDNUnited States
AS15169Google LLC
1064.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
10142.251.110.95Google · CDNUnited States
AS15169Google LLC
10172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10216.239.32.36Google · CDNUnited States
AS15169Google LLC
13213--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11B04F77380601415A32F5ACBB0507F8EB096A126CF5E89A5F2D9CE4CBFC1DD53A9258F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:rzsC/cUGgUOUDA1VBAWDO0q3PHnTXYDCRYa4SxqdodRgMUM7eLgv+5fZ2kLkMBse:rzv4JMdVPqfHnTIndoUal2lZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:178110:QiEWGCsQMVoQIOCBygIBAYZ4cWyhxw0DA2haFBwEDBRyC1EBDlpQhhGFFLwsBDAGFQQIgCCQGg1CBDBUCWI0IECiA5UtUAOs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000001feffff
Perceptual Hash:9606d6e3ad20dbe1
Difference Hash:2ee4f5f727489b36
Wavelet Hash:ff00000000ffffff
Color Hash:06000000007

Scan History

Scan history not available

Unable to load historical scan data