Security Report: zehrademirel.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/76d37442-189a-4890-8d0d-7fab3c9aa2f7 Domain and IP registration (RDAP)/api/v1/rdap/76d37442-189a-4890-8d0d-7fab3c9aa2f7How often this domain was scanned/api/v1/domain/stats/zehrademirel.com Scan history for this domain/api/v1/domain/history/zehrademirel.com?limit=15

This website contacted 11 IPs in 3 countries across 13 domains to perform 30 HTTP transactions. The main domain is zehrademirel.com and was registered 7 months ago.

Submitted URL: https://zehrademirel.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress site confirmed serving ErrTraffic/Exvicy and ClearFake malware loaders via EtherHiding blockchain contracts, wrapped in hidden Turkish gambling SEO spam. Do not visit.

Risk Factors (6)

Compromised WordPress site serving ErrTraffic/Exvicy and ClearFake malware chains

EtherHiding: next-stage payload address retrieved from a smart contract via public RPC nodes

Obfuscated JavaScript concealing threat-feed hosts (iclickfix trackers, RPC endpoints, fake captcha domain)

Critical IDS alerts for malware exfiltration and exploit-kit check-in

Hidden gambling affiliate SEO spam unrelated to the site's stated trading-education persona

Unranked domain (no Cisco Umbrella reputation) only 222 days old

Domain age information unavailable

Details

Page Title

Borsa Uzmanı Zehra Demirel – Borsa Uzmanı Zehra Demirel

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'zehrademirel.com' is registered and has no subdomain. Its registrable label 'zehrademirel' stretches across 12 characters split between 5 vowels and seven consonants. Breaking it apart gives 4 words: ze, hr, ademir, el. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

24.27s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:18,388 chars

Detector Agreement:75%

Website Classification

Primary Category

gambling betting97% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

gambling betting

97%

entertainment media

77%

technology software

74%

government public service

43%

finance banking

35%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	104.21.67.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	142.251.127.84Google · CDN	United States	AS15169Google LLC
2	13.33.52.208Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
2	172.67.183.47Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
30	11	-	-