Security Scan Report: esrataskinadiyaman.com

Site favicon
Submitted: Sep 21, 2026, 3:47:28 AMCompleted: Sep 21, 2026, 3:48:21 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Legitimate Turkish law-firm content appears on a domain flagged for malware; external malware resource and critical EtherHiding IDS alert indicate compromise and active malware distribution.

Risk Factors (4)
Content-malware Indicators of Compromise match on the primary domain (unknown stealer)
Page loads external resource xaz2.com flagged as iclickfix malware by 2 feeds
Critical network IDS alert for EtherHiding exfiltration
Ethereum Sepolia RPC endpoint is present, consistent with EtherHiding exfiltration
Domain age information unavailable

Details

Page Title

Isparta Avukat | Avukat Danismanlik ve Arabulucu | Avukat Esra Taskin

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'esrataskinadiyaman.com' is registered with no subdomain. Its registrable label 'esrataskinadiyaman' stretches across 18 characters split between 8 vowels and 10 consonants. Breaking it apart gives 5 words: es, rata, skin, adi, yaman. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://esrataskinadiyaman.com

Page Load Overview

16.40s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

馃嚬馃嚪Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:7,288 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning77% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

education learning
77%
blog personal website
66%
adult content
58%
forum community discussion
37%
news/blog
35%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17185.50.70.113Istanbul, Istanbul, Turkey
AS208425Osbil Technology Ltd.
3142.251.127.95Google 路 CDNUnited States
AS15169Google LLC
3142.251.110.97Google 路 CDNUnited States
AS15169Google LLC
313.33.187.2Cloudfront 路 CDNNew York, New York, United States
AS16509Amazon.com, Inc.
3142.251.20.132Google 路 CDNUnited States
AS15169Google LLC
3142.250.154.95Google 路 CDNUnited States
AS15169Google LLC
3142.251.20.97Google 路 CDNUnited States
AS15169Google LLC
313.33.187.25Cloudfront 路 CDNNew York, New York, United States
AS16509Amazon.com, Inc.
3142.251.110.132Google 路 CDNUnited States
AS15169Google LLC
3172.67.70.207Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
6517--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159D217B3E28404913F5DD79CB2F7B22C9294E919C9126BA7B0FE305D85648F7109792F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Z9fNwMKDfNQ62Ho/xE6x4aUg/5j/nfnDyLIJTf+Iwz/Yvuzp72Q4r/ZdSZUaAhH4:Z9i5Q62I/xE6x4g5bn/iIRfjTZdypa9K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29763:4wLLKiYlCGmkYUBii1BQkNRQSSIgkYUYoHCEECWgOQJKiywYLSQRnlINQWcOiQpBAVwCUGQxwcYBlgVIADzSSMIAyBbpgCAp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff9fffe7e3c787
Perceptual Hash:b9c639c739c63846
Difference Hash:0620280006021e1e
Wavelet Hash:e0fe9efe8280c28e
Color Hash:#784f3a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data