Security Report: toybelenturbo.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/275ec2c1-a505-4708-be2d-9071a1e15587 Domain and IP registration (RDAP)/api/v1/rdap/275ec2c1-a505-4708-be2d-9071a1e15587How often this domain was scanned/api/v1/domain/stats/toybelenturbo.com Scan history for this domain/api/v1/domain/history/toybelenturbo.com?limit=15

This website contacted 6 IPs in 3 countries across 5 domains to perform 60 HTTP transactions. The main domain is toybelenturbo.com and was registered 6 months ago.

Submitted URL: https://toybelenturbo.com

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Real Turkish auto-repair site whose page is carrying an injected ClickFix kit: a fake Cloudflare 'Human Verification' overlay that tells Windows users to paste commands into Terminal. CRITICAL YARA and IDS malware hits. Do not interact.

Risk Factors (5)

Injected ClickFix social-engineering overlay directing users to paste a command into Windows Terminal

CRITICAL YARA malware/kit match on the HTML body (roster-anchored)

CRITICAL network IDS malware alerts, including EtherHiding exfiltration and a ClickFix domain in TLS SNI

Primary domain flagged as a malware loader by threat intelligence (single-source, unverified)

Blockchain RPC cross-origin script call (tenderly.co) consistent with EtherHiding abuse

Domain age information unavailable

Details

Page Title

Toybelen Turbo Servisi | Chip Tuning & Mekanik Onarım – Samsun Toybelen Turbo Servisi kalitesiyle tanışın! Garantili mekanik bakım onarım, profesyonel turbo revizyonu ve chip tuning ile aracınızın performansını zirveye taşıyın.

Scan Type

public

Favicon Hash

MMH3: -654968331

MD5: bdb190dcdd415cbdf6afe0b2300d958b

Domain Name Analysis

The domain 'toybelenturbo.com' uses the commercial generic top-level domain (.com). The second-level label 'toybelenturbo' is 13 characters long split between five vowels and 8 consonants. Tokenizing the label suggests 4 words: toy, be, len, turbo. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.75s

Total Load Time

5.9 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:4,309 chars

Detector Agreement:75%

Website Classification

Primary Category

government public service48% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

48%

corporate business

44%

technology software

30%

finance banking

29%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	31.210.42.188	Turkey	AS207326HostLAB Bilisim Teknolojileri A.S.
10	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
10	142.251.127.95Google · CDN	United States	AS15169Google LLC
10	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
10	142.250.154.94Google · CDN	United States	AS15169Google LLC
10	142.251.13.95Google · CDN	United States	AS15169Google LLC
60	6	-	-