Security Scan Report: www.hyundaiservisiankara.com

Submitted: Sep 22, 2026, 11:26:19 AMCompleted: Sep 22, 2026, 11:26:48 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Active ClickFix FakeCAPTCHA malware page: fake Cloudflare 'verify you are human' lure copies a Windows msiexec shell command to the clipboard and instructs the victim to run it via Win+R — confirmed malware delivery.

Risk Factors (4)
Known malicious ClickFix/FakeCAPTCHA kit serving a clipboard-injected LOLBin execution chain
Multi-source threat-intel match on the primary domain (malicious + stealer labels)
Impersonation of Cloudflare's human-verification challenge UI on a non-Cloudflare domain
Social-engineering instructions that direct users to run a shell command via Win+R
Domain age information unavailable

Details

Page Title

Checking if you are human

Scan Type

public

Domain Name Analysis

The domain 'www.hyundaiservisiankara.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Count 20 characters in 'hyundaiservisiankara' with 9 vowels and 11 consonants. It segments into five words: hyundai, se, rvis, i, ankara. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.hyundaiservisiankara.com

Page Load Overview

10.17s
Total Load Time
139 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:734 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software50% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
50%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1185.179.26.181Turkey
AS219450Voyar Verimerkezi Teknolojileri Ltd. Sti
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1195.154.239.27Paris, Île-de-France, France
AS12876Scaleway SAS
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1192.178.183.106Google · CDNUnited States
AS15169Google LLC
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.106Google · CDNUnited States
AS15169Google LLC
88--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E228522A6601017BA57C0E8B8A3E79B32328203D7455A797DED15A0DF8FDD65EB318C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1rKtfRJslfHR1i5k0TjVAdfn3jPxOz7SX5A2RI1MbUbj6d+uf0RNMtY/8xiZj3xp:1rKDCxlPX60pY9szC6ieW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10033:MaAGFlBiCCQESCQ7JYESIwsBnCQCEhEyAJpEIakeCiSaMSCyzBAiQPkSx6PbKBwQIAWmEUeJCENBDISggGAIDKBABggCJAQT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3c7e7ffffff
Perceptual Hash:b03080c7cfc9cdcf
Difference Hash:088c96164c000000
Wavelet Hash:0000000cc3f7ffff
Color Hash:#86842d

Other Hashes

Crop Resistant:088c96164c000000

Scan History

Scan history not available

Unable to load historical scan data