Security Scan: Doğan Oksijen San. Gaz Ltd. Şti.

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9b635933-0269-49c5-9cab-0ab2605d3e22 Domain and IP registration (RDAP)/api/v1/rdap/9b635933-0269-49c5-9cab-0ab2605d3e22 Certificate Transparency/api/v1/ct/doganoksijen.com How often this domain was scanned/api/v1/domain/stats/doganoksijen.com Scan history for this domain/api/v1/domain/history/doganoksijen.com?limit=15

This website contacted 37 IPs in 2 countries across 26 domains to perform 141 HTTP transactions. The main domain is doganoksijen.com and was registered 3 weeks ago.

Submitted URL: https://doganoksijen.com

Effective URL:

https://www.doganoksijen.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate 21-year-old Turkish industrial-gas site appears compromised and now serves ClearFake/EtherHiding malware via blockchain RPC with a fake Microsoft verification overlay — avoid interacting and report.

Risk Factors (5)

CRITICAL network IDS malware alerts (EtherHiding exfiltration) indicating active blockchain-based malware loading

Multiple corroborated content-malware Indicators of Compromise on third-party resources served to visitors

Injected fake Microsoft account sign-in / CAPTCHA verification overlay on a site whose business is unrelated to Microsoft

Clipboard/keystroke social-engineering instructions and 'Do not close this window' persistence language

Connection to blockchain RPC endpoints used for hidden payload retrieval

Domain age information unavailable

Details

Page Title

Doğan Oksijen San. Gaz Ltd. Şti.

Scan Type

public

Favicon Hash

MMH3: 975301687

MD5: e52c637473e44b254b17acd1498ec618

Domain Name Analysis

You're looking at domain 'doganoksijen.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'doganoksijen' covers 12 characters holding five vowels versus seven consonants. Segmentation suggests 5 words: dog, a, no, ksi, jen. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

21.98s

Total Load Time

3.5 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:3,107 chars

Detector Agreement:75%

Website Classification

Primary Category

corporate business65% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

65%

documentation technical

62%

healthcare medical

44%

technology software

27%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
33	74.125.29.95Google · CDN	United States	AS15169Google LLC
3	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.178.183.113Google · CDN	United States	AS15169Google LLC
3	192.185.79.119	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	142.251.154.119Google · CDN	United States	AS15169Google LLC
3	142.251.150.119Google · CDN	United States	AS15169Google LLC
3	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
141	37	-	-