Security Scan Report: liyamotosiklet.com

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 6 domains to perform 100 HTTP transactions. The main domain is liyamotosiklet.com and was registered 2 years 1 month ago.

Submitted URL: https://liyamotosiklet.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Web site of a legitimate Turkish motorcycle maker, but it is compromised: it loads the Macfinger ClickFix AMOS stealer loader (CRITICAL kit + YARA + IDS) from malware-flagged host birch-koix-7keeb.pro and carries injected gambling spam. Do not visit.

Risk Factors (4)
Malicious Macfinger ClickFix (macOS AMOS stealer) loader injected into the page
Threat-intel malware match on third-party script host birch-koix-7keeb.pro (iclickfix, 2 feeds)
Evidence of site compromise: hidden injected gambling link spam across many languages unrelated to the business
Unranked cross-origin script host contacted via sendBeacon
Domain age information unavailable

Details

Page Title

Liya Motosiklet | Türkiye'nin Yenilikçi Motosiklet Üreticisi

Scan Type

public

Domain Name Analysis

You're looking at domain 'liyamotosiklet.com' on the commercial generic top-level domain (.com). Count 14 characters in 'liyamotosiklet' holding 6 vowels versus 8 consonants. It segments into five words: li, ya, moto, sik, let. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://liyamotosiklet.com

Page Load Overview

13.22s
Total Load Time
11.1 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:7,583 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical93% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
93%
corporate business
72%
news/blog
35%
corporate
35%
finance banking
34%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2094.199.206.178Istanbul, Istanbul, Turkey
AS42807Cizgi Telekomunikasyon Anonim Sirketi
16142.251.110.95Google · CDNUnited States
AS15169Google LLC
16138.124.58.227Paris, Île-de-France, France
AS210644Aeza Group LLC
16192.178.183.97Google · CDNUnited States
AS15169Google LLC
16142.251.14.94Google · CDNUnited States
AS15169Google LLC
16216.239.34.36Google · CDNUnited States
AS15169Google LLC
1006--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T146042A71BDAD6879211F32CED02BA71C158BC16BE74086F076FD519CE3D2EC0B96A189

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:3ZhkfS6nIzk0wCwmz5gwo5VPmz5gwo5V9kLV:3bEZXw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:189559:EimwSbicAdScerwgYINApoAKCiQUIVQioQHFooAARIkBAaWwhDBADU4AI2EBIEUhjIYKAokEiTSCQoNwGQeIffF4QVgHAdhA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e79f8fbf9fffe781
Perceptual Hash:bf9461866fc0691e
Difference Hash:2a30382068090c1b
Wavelet Hash:00be8e9f9eeec280
Color Hash:#931f4e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data