Security Scan Report: emlakavrupa.eu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 196 HTTP transactions. The main domain is emlakavrupa.eu.

Submitted URL: https://emlakavrupa.eu

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Turkish real-estate-looking site (2 days old) carrying an analyst-confirmed ClickFix kit: a fake Cloudflare verification overlay instructs Windows users to open Terminal, paste and run a hidden command, with CRITICAL IDS alerts for ClickFix/EtherHiding C2.

Risk Factors (6)
Known ClickFix (Win+X -> Terminal) phishing kit injected into the page, confirmed by analyst-vetted roster and YARA
Fake Cloudflare 'Human Verification' overlay with Ray ID and keyboard instructions to paste a command into Terminal
CRITICAL IDS alerts for ClickFix domain gateway.tenderly.co and EtherHiding exfiltration
Multi-source threat-intel match (clearfake/malware) against the primary domain
Domain registered 2 days ago on an unranked host
Blockchain RPC / web3 script calls to polygon.gateway.tenderly.co and blastapi.io used as malware infrastructure
Domain age information unavailable

Details

Page Title

emlak avrupaother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'emlakavrupa.eu' on the .eu country-code top-level domain without a subdomain. The core label 'emlakavrupa' covers 11 characters split between five vowels and six consonants. Segmentation suggests 3 words: em, lak, avrupa. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://emlakavrupa.eu

Page Load Overview

7.22s
Total Load Time
19.0 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:2,163 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software44% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
44%
documentation technical
38%
cryptocurrency blockchain
34%
real estate property
33%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28160.153.0.51Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
24151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2423.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
24104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
24178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
2423.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2423.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1968--

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10B44C66139E65C2530AF86C34046FE0D619D92A3DA569EF5F2BCCF0417F8EB03796A09

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Mco1VB645/IOQ36fQPYkeTkEkoskBu/BDB6hiqFrvt8Gcpa4hcVPxNMhbakASWWa:Kj/si

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:256944:qLhFgvJoCYlIhAAvDFQIQyBMpAFmKBUaUESQakmOrReDvIAjpgiGmAkEgIAkAehkS6iIAG4CCFnxigDlURIylQwBX5ioMoBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data