Security Report: zeynelozyasar.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7f04a3df-0d22-4437-82f1-3c3c3a07d6d3 Domain and IP registration (RDAP)/api/v1/rdap/7f04a3df-0d22-4437-82f1-3c3c3a07d6d3How often this domain was scanned/api/v1/domain/stats/zeynelozyasar.com Scan history for this domain/api/v1/domain/history/zeynelozyasar.com?limit=15

This website contacted 27 IPs in 3 countries across 18 domains to perform 80 HTTP transactions. The main domain is zeynelozyasar.com and was registered 18 years ago.

Submitted URL: https://zeynelozyasar.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Compromised WordPress coffee blog now serving an EtherHiding/ClickFix malware loader: critical IDS alerts, blockchain RPC C2 links, and fake-CAPTCHA PowerShell instructions. Avoid.

Risk Factors (5)

Critical malware IDS alerts (EtherHiding exfiltration)

Blockchain-based payload/hosting infrastructure

Fake CAPTCHA instructing PowerShell paste-and-run (ClickFix)

Primary domain flagged as malware family in threat intel

6 cross-domain redirects

Domain age information unavailable

Details

Page Title

Zeynel – Kişisel Blog

Scan Type

public

Favicon Hash

MMH3: -12812985

MD5: ebc20ba20c6ae6e951873500c9420e36

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'zeynelozyasar.com' is registered without a subdomain. The core label 'zeynelozyasar' covers 13 characters holding five vowels versus eight consonants. Segmentation suggests five words: ze, yn, elo, zy, asar. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.53s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:4,263 chars

Detector Agreement:75%

Website Classification

Primary Category

blog personal website99% confidence

Type: webapp

Method: ml+structural

All Detected Categories

blog personal website

99%

documentation technical

61%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
28	142.251.14.97Google · CDN	United States	AS15169Google LLC
2	37.77.28.35	Turkey	AS12735TurkNet Iletisim Hizmetleri A.S.
2	142.251.20.155Google · CDN	United States	AS15169Google LLC
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	87.250.250.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	87.250.251.119Yandex · CLOUD	Russia	AS13238YANDEX LLC
2	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
80	27	-	-