Security Scan Report: www.hyundaiservisiankara.com

Submitted: Sep 21, 2026, 1:47:39 AMCompleted: Sep 21, 2026, 1:48:02 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Cloudflare CAPTCHA (ClickFix) that tricks users into pasting and executing a malicious LOLBin command via the Windows Run dialog. Multiple CRITICAL IDS/YARA kit hits and stealer/clearfake threat intel. Do not interact.

Risk Factors (5)
Known malicious ClickFix fake-CAPTCHA kit (YARA + analyst roster)
Instructs victim to run a Windows Run-dialog command that pastes and executes clipboard content
Multiple CRITICAL IDS malware alerts (ClickFix landing/delivery page)
Impersonates Cloudflare's human-verification/CAPTCHA UI
Threat-intel reports of clearfake exploit kit and Unknown Stealer associated with the domain
Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.hyundaiservisiankara.com' is registered, featuring subdomain 'www'. Its registrable label 'hyundaiservisiankara' stretches across 20 characters split between nine vowels and eleven consonants. Splitting it apart reveals five words: hyundai, se, rvis, i, ankara. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.hyundaiservisiankara.com

Page Load Overview

3.69s
Total Load Time
139 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:734 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software50% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
50%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2185.179.26.181Turkey
AS219450Voyar Verimerkezi Teknolojileri Ltd. Sti
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1195.154.239.25Paris, Île-de-France, France
AS12876Scaleway SAS
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.110.147Google · CDNUnited States
AS15169Google LLC
1192.178.183.104Google · CDNUnited States
AS15169Google LLC
87--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E228522A6601017BA57C0E8B8A3E79B32328203D7455A797DED15A0DF8FDD65EB318C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1rKtfRJslfHR1i5k0TjVAdfn3jPxOz7SX5A2RI1MbUbj6d+uf0RNMtY/8xiZj3xp:1rKDCxlPX60pY9szC6ieW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10033:MaAGFlBiCCQESCQ7JYESIwsBnCQCEhEyAJpEIakeCiSaMSCyzBAiQPkSx6PbKBwQIAWmEUeJCENBDISggGAIDKBABggCJAQT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3c3c3e7e7ffff
Perceptual Hash:b03084c6cbc9cfcf
Difference Hash:1c8c1e9e480c1000
Wavelet Hash:1703030303273f3f
Color Hash:#87bac5

Other Hashes

Crop Resistant:1c8c1e9e480c1000

Scan History

Scan history not available

Unable to load historical scan data