Security Scan Report: hilaldc.com.tr

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 6 HTTP transactions. The main domain is hilaldc.com.tr and was registered 7 months ago.

Submitted URL: https://hilaldc.com.tr/wike/#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake 'access your document' login page carrying a victim email token in the URL fragment for an unrelated domain, plus a password field — a credential-harvesting phishing kit.

Risk Factors (5)
Phishing-kit victim email token in the URL fragment pointing to an unrelated domain (akjsasuashwsd.bloggy.se)
Password field present on a page that has no legitimate account system to explain it
Document-access pretext typical of fake e-signature / file-sharing credential theft kits
Domain not ranked in Cisco Umbrella top 1M and very low business legitimacy score
Network IDS alerts citing an actor-abused third-party service (image.thum.io)
Domain age information unavailable

Details

Page Title

Access your document

Scan Type

public

Domain Name Analysis

Within the Turkish country-code top-level domain (.com.tr), 'hilaldc.com.tr' is registered. The core label 'hilaldc' covers 7 characters split between 2 vowels and 5 consonants. Tokenizing the label suggests 2 words: hilal, dc. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hilaldc.com.tr/wike/#4ccee9@akjsasuashwsd.bloggy.se

Page Load Overview

0.41s
Total Load Time
89 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:151 chars
Detector Agreement:67%

Website Classification

Primary Category

adult content60% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
60%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
687.76.142.165Bursa, Bursa Province, Turkey
AS209658MEOHOST VERI MERKEZI ve YAZILIM TICARET LIMITED SIRKETI
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
052.55.196.165Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
0104.26.15.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.14.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
67--

Detected Technologies7

JQueryv3.6.0
100%
Bootstrapv4.0.0
100%
PHPv8.1.28
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A52B35962F311901553E0BC3BAB67067268E007AA0ACD183D9D23D89F4AD69FCF33C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:WC0YJyRq//U8Jm2lAvaIEeomW9X/UvnfZyC763SooN3PfgP9b:lTzFyoL9X8BFngZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13701:IJMwwEtQezshkCAO0GAhIIAMKLGQAZSE6DSdlwuUiiYBBAPiMVjxMAEASkJlDQiMFGgUEhMQAIIuAQCBIO50gDBBXKCBQkAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff83838fc7e7ffff
Perceptual Hash:b63cc9c39998634d
Difference Hash:00263e380c0d2008
Wavelet Hash:fc80808480e0fcfc
Color Hash:#b7bf40

Other Hashes

Crop Resistant:00263e380c0d2008

Scan History

Scan history not available

Unable to load historical scan data