Security Scan Report: sirrikaplama.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 7 domains to perform 168 HTTP transactions. The main domain is sirrikaplama.com and was registered 10 years ago.

Submitted URL: https://sirrikaplama.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate Turkish MDF factory site compromised and injected with a ClickFix/EtherHiding loader; CRITICAL IDS alerts, analyst-vetted malicious kit, and blockchain-staged malware retrieval. Do not visit.

Risk Factors (5)
Known malicious ClickFix/EtherHiding injection on a compromised site (analyst-vetted kit roster)
CRITICAL IDS alerts for EtherHiding exfiltration and ClickFix C2 domain zvh4.com
Blockchain-based dead-drop resolver used to fetch encrypted malware stage
Obfuscated script concealing threat-feed hosts only revealed after decoding
Primary domain itself flagged as a malware loader in threat intelligence
Domain age information unavailable

Details

Page Title

SırrıKAPLAMA Kaplamalı mdf fabrikası – Kaplamalı mdf fabrikası

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sirrikaplama.com' is registered. Its registrable label 'sirrikaplama' stretches across 12 characters holding five vowels versus seven consonants. Splitting it apart reveals 4 words: sir, rika, p, lama. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sirrikaplama.com

Page Load Overview

39.62s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:4,462 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2491.151.82.118Turkey
24104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24142.251.14.95Google · CDNUnited States
AS15169Google LLC
2445.80.180.248Singapore, Singapore
AS47583Hostinger International Limited
24192.178.183.94Google · CDNUnited States
AS15169Google LLC
24172.67.68.196Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1687--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16404B6A238EE283A110F12CFA017620C91DBFFF2DA1399D5B6BF013857B5DD13A92655

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:pERdU6UCB+KR2ia9vb8uLeNoKZfGBv5BwlG8J/cSIEPgsRb6x1T/G7lGRUdO9heq:pERd2sCia9vb8uLeNoKZfGBv5BZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:174621:OZIkPBAhAM4DoSAFKhQtCiRACCkgDsCDISBAAUFFyggwRmxfAl8ERSEB0N4onuJ5RhwikmEoYEAwTGgwQACNCmJACjAoRlRo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000204040019ff
Perceptual Hash:aa77a86ad52ad509
Difference Hash:0d19545c5819b3f3
Wavelet Hash:818d1f8f0f0119ff
Color Hash:#6fac53

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data