Security Scan Report: hyphagen.com

Submitted: Oct 11, 2026, 10:46:54 PMCompleted: Oct 11, 2026, 10:47:37 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking 4-year-old Turkish agriculture site that appears compromised: analyst-vetted ClearFake loader YARA match plus a malware threat-intel hit and injected casino spam. Do not interact until cleaned.

Risk Factors (4)
ClearFake malicious loader kit identified by analyst-vetted YARA rule (blockchain contract loader / ClickFix chain)
Primary domain flagged as malware loader in threat intelligence (single-source, unverified)
Injected off-topic casino/gambling spam articles on an agriculture company site, indicating site compromise
JavaScript obfuscation heuristics observed in network IDS
Domain age information unavailable

Details

Page Title

Anasayfa - HYPHAGEN GIDA TARIM DANIŞMANLIK

Scan Type

public

Domain Name Analysis

The domain name 'hyphagen.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'hyphagen' is 8 characters long holding 2 vowels versus 6 consonants. Tokenizing the label suggests 3 words: hy, phage, n. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hyphagen.com

Page Load Overview

6.50s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:4,110 chars
Detector Agreement:60%

Website Classification

Primary Category

documentation technical46% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
46%
news/blog
35%
corporate
35%

Detected Features

Search
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14185.7.82.55Bursa, Bursa Province, Turkey
AS58212dataforest GmbH
11142.251.127.95Google · CDNUnited States
AS15169Google LLC
11172.217.118.4Google · CDNUnited States
AS15169Google LLC
11142.251.20.94Google · CDNUnited States
AS15169Google LLC
11107.191.55.223Dallas, Texas, United States
AS20473The Constant Company, LLC
11142.251.14.95Google · CDNUnited States
AS15169Google LLC
11172.217.116.4Google · CDNUnited States
AS15169Google LLC
11172.217.119.4Google · CDNUnited States
AS15169Google LLC
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
11172.217.117.4Google · CDNUnited States
AS15169Google LLC
11310--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BDD3E732A2991837237746D8A0B4774EB4A7E726CE0749E8F2FD62B46BC4DF6150321D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:OeZNVAw9b1YVTcCuCi9eHGmpypIUL41B2bjZHcrg9UsfpSHI9jITHFHOH+dHG1pB:Ojw9mmeypIBSNcsmThK+p4pp69NxCDHX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142009:UECAiIwJGEAA8lSsQ5ZG9uIo1WTDYLFYQIFUI6UzQVGD6ABIkBCyNsNgYgMIXCYUoCgGAhBgJYCAwDERWyAAAMSpmCc4jurB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffffffff
Perceptual Hash:d555555555555551
Difference Hash:0000000808000000
Wavelet Hash:0e0e0a02e6fef2f2
Color Hash:#77862d

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data