Security Scan Report: temizellerdanismanlik.com.tr

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 8 domains to perform 195 HTTP transactions. The main domain is temizellerdanismanlik.com.tr and was registered 8 months ago.

Submitted URL: https://temizellerdanismanlik.com.tr

AI Security Verdict

High Risk

Confidence: 87%

9
Risk Score

Turkish home-care site whose content is legitimate but whose WordPress appears compromised: obfuscated scripts use EtherHiding to pull a ClearFake-style malware payload from blockchain contracts. Do not interact.

Risk Factors (6)
Blockchain-based EtherHiding payload retrieval hidden in obfuscated JavaScript
Malicious third-party host cloudflare-check.net (ClearFake, 3 corroborating feeds) loaded by the page
Primary domain flagged as a malware loader (single-source, unverified)
Injected pharmaceutical/SEO spam text on an otherwise unrelated care-service page
ET HUNTING JavaScript-obfuscator usage alerts corroborate the obfuscated script
Domain unranked in Cisco Umbrella and only 257 days old
Domain age information unavailable

Details

Page Title

Hasta Bakıcı Hizmetleri - Temizeller Danışmanlık - 0532 554 82 60

Scan Type

public

Domain Name Analysis

Within the Turkish country-code top-level domain (.com.tr), 'temizellerdanismanlik.com.tr' is registered. Count 21 characters in 'temizellerdanismanlik' with 8 vowels and 13 consonants. Tokenizing the label suggests 8 words: te, miz, eller, dan, is, man, li, k. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://temizellerdanismanlik.com.tr

Page Load Overview

21.88s
Total Load Time
12.6 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:5,611 chars
Detector Agreement:80%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2578.135.82.3Istanbul, Istanbul, Turkey
AS207326HostLAB Bilisim Teknolojileri A.S.
17142.251.110.95Google · CDNUnited States
AS15169Google LLC
17142.250.154.97Google · CDNUnited States
AS15169Google LLC
17142.251.14.94Google · CDNUnited States
AS15169Google LLC
17142.251.151.119Google · CDNUnited States
AS15169Google LLC
17142.250.154.149Google · CDNUnited States
AS15169Google LLC
17216.239.32.36Google · CDNUnited States
AS15169Google LLC
17142.251.14.95Google · CDNUnited States
AS15169Google LLC
17142.251.153.119Google · CDNUnited States
AS15169Google LLC
17142.251.20.148Google · CDNUnited States
AS15169Google LLC
19511--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10114C777795E043E531F52CA6017BE0EE0C99AB6CB5184E1BAFE011CDFA8D91339352A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:PzsRf8xxfOn6YLymLMCXTlv0wJtn5d1ppg9zRXlTyj4GNgh8HrmvBBQafsUKeQ7H:XxfO6YLymLMCXTlv0wJbzTa11WjjbAPe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:194250:QpwFTkIsAwKEHGUIAGjgkABtDgwWQIAAigMhSvaGBHUsCCADwiqNQ8UkDxRmNEpR5UOAKZQNFhY0i5zE+AIECHnKEBBwwCIR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffe7e7ffffff
Perceptual Hash:aa55555577aa88aa
Difference Hash:0000010909010101
Wavelet Hash:0e0e1f0f0f1f0f0f
Color Hash:#e0a46c

Other Hashes

Crop Resistant:0000010909010101

Scan History

Scan history not available

Unable to load historical scan data