Security Scan Report: diayazilim.com

Redirected to:
https://www.diayazilim.com/
Site favicon
Submitted: Sep 14, 2026, 1:47:29 AMCompleted: Sep 14, 2026, 1:50:02 AMpubliccompleted

This website contacted 23 IPs in 3 countries across 20 domains to perform 207 HTTP transactions. The main domain is diayazilim.com and was registered 18 years ago.

Submitted URL: https://diayazilim.com

Effective URL:

https://www.diayazilim.com/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking 14-year-old Turkish ERP site appears compromised, loading scripts from reported ClearFake/loader domains and generating 9 CRITICAL EtherHiding exfiltration IDS alerts. Do not browse.

Risk Factors
CRITICAL IDS malware alerts indicating EtherHiding exfiltration (blockchain-hosted payload)
Third-party resources loaded from independently-reported malicious loader domains (ClearFake infrastructure)
Content-malware threat-intel match on the primary domain
Blockchain RPC usage consistent with wallet-drainer / EtherHiding malware delivery
Site appears compromised: legitimate 14-year-old ERP business now serving malicious script infrastructure
Domain age information unavailable

Details

Page Title

Dia Yazılım - Bulut Muhasebe Programı - Stok Fatura Cari ERP

Scan Type

public

Domain Name Analysis

The domain 'diayazilim.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'diayazilim' stretches across 10 characters holding five vowels versus 5 consonants. Tokenizing the label suggests 4 words: dia, yaz, i, lim. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://diayazilim.com

Page Load Overview

90.42s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:4,852 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software97% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
97%
corporate business
94%
documentation technical
62%
government public service
59%
finance banking
48%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
978.142.208.232Izmir, İzmir Province, Turkey
AS209853Veridyen Bilisim Teknolojileri Sanayi ve Ticaret Limited Sirketi
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9142.251.150.119Google · CDNUnited States
AS15169Google LLC
9104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.152.119Google · CDNUnited States
AS15169Google LLC
9142.251.153.119Google · CDNUnited States
AS15169Google LLC
9152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
9142.251.110.97Google · CDNUnited States
AS15169Google LLC
9142.251.20.102Google · CDNUnited States
AS15169Google LLC
9142.251.127.149Google · CDNUnited States
AS15169Google LLC
20723--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DC11E776F8018D1C01C165EEBCD5F014410AF0987A548870EBCA741DBFC0BF46AEADCA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:h1TqI1iK1EtU+ZR1VmOvtMg7W4evPdg/9eIG:HO5u+P227lwlTT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:871:AEAAhAAAAAIAFAAAAAAAACSAAAAAICAAAAAACQBAAAAAAAAEAAAAAAEAAAAAAACAAAIAACAIAACAAAgAAAAAACgAAAAAAAII

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101010101010101
Perceptual Hash:aa5577555d553700
Difference Hash:0101011111010101
Wavelet Hash:011311191f0f0f0f
Color Hash:#87c599

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data