Security Scan Report: yilmazbijuteri.com.tr

Site favicon
Submitted: Oct 14, 2026, 6:26:15 PMCompleted: Oct 14, 2026, 6:27:00 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking Turkish jewelry site is compromised: an injected ClickFix fake-Cloudflare overlay plus EtherHiding blockchain loader and exploit-kit C2 push visitors to run malware. Avoid entirely.

Risk Factors (6)
Injected ClickFix 'Human Verification' overlay coaching users to open Terminal and paste/run commands
EtherHiding blockchain-based loader fetching next stage from a Polygon smart contract
Exploit-kit command-and-control traffic (TA2726 fake WordPress plugin, TA569 Gholoader, ErrTraffic)
Obfuscated JavaScript concealing malicious RPC/relay hosts
Compromised WordPress/WooCommerce site (4 forms, wp nonces) serving injected malware to visitors
Threat-intel malvertising/malware matches on the scanned primary domain
Domain age information unavailable

Details

Page Title

Yılmaz Bijuteri – Türkiye'nin Bijuteri Toptancısıother network

Scan Type

public

Domain Name Analysis

Within the Turkish country-code top-level domain (.com.tr), 'yilmazbijuteri.com.tr' is registered while skipping any subdomain. The second-level label 'yilmazbijuteri' is 14 characters long with 6 vowels and 8 consonants. Word splitting yields six words: y, il, maz, bi, j, uteri. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yilmazbijuteri.com.tr

Page Load Overview

10.58s
Total Load Time
6.7 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:3,238 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business76% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
76%
adult content
37%

Detected Features

Login Form
Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1445.11.97.85Turkey
AS48678Pentech Bilisim Teknolojileri Sanayi Ve Ticaret Limited Sirketi
13104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13142.251.14.95Google · CDNUnited States
AS15169Google LLC
13152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
1335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
13178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
13142.250.154.94Google · CDNUnited States
AS15169Google LLC
13192.178.183.95Google · CDNUnited States
AS15169Google LLC
13142.251.20.94Google · CDNUnited States
AS15169Google LLC
13151.236.16.211Los Angeles, California, United States
AS9009M247 Europe SRL
13110--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BD244AF17665083E875B53DFA02A6B1DD1AA91E9EA418490F5FE0219AFF5CC47383338

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:dB3uojBXBDAU0A6Ah5ADlMDAbAmrUAEGAliNxnpZsFsGsGElgigWAV1kpYrwzalH:NxMcfUB0yoliNxnp0kpipFX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:210492:whsAQCRCRIUkGoAQGpCBqBIAPNCBYUIAACQItRaEhhgoZEgIRgog0V+MX5pL2hag4AAhBVUJKoQnxAJpAQgaTXEBKXUmI0EF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffffc981
Perceptual Hash:fb847b843b847b84
Difference Hash:600000001100131b
Wavelet Hash:12f2c2c2f0f00000
Color Hash:#6d1f93

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data