Security Scan: Nurmas İç ve Dış Ticaret A.Ş.

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e671c240-16af-4ab3-a6a3-283451444733 Domain and IP registration (RDAP)/api/v1/rdap/e671c240-16af-4ab3-a6a3-283451444733How often this domain was scanned/api/v1/domain/stats/nurmas.com.tr Scan history for this domain/api/v1/domain/history/nurmas.com.tr?limit=15

This website contacted 7 IPs in 3 countries across 6 domains to perform 74 HTTP transactions. The main domain is nurmas.com.tr and was registered 4 years 1 month ago.

Submitted URL: https://www.nurmas.com.tr/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised Nurmas stone-company site carries an injected ClickFix kit: a fake Cloudflare 'Human Verification' overlay pushes Windows users to paste a command in Terminal, loading a blockchain-hosted (EtherHiding) payload. Do not interact.

Risk Factors (5)

Injected ClickFix social-engineering overlay impersonating Cloudflare's security check

Instructions lead users to run a pasted command in Windows Terminal (malware execution)

EtherHiding: loader retrieves next-stage payload address from a Polygon smart contract

Obfuscated script concealing a known-attacker host (1rpc.io)

Multi-feed malicious classification of the third-party resource cloud-browse.codes

Domain age information unavailable

Details

Page Title

Nurmas İç ve Dış Ticaret A.Ş.

Scan Type

public

Favicon Hash

MMH3: 418773573

MD5: 84dbec2fe478b625901f253e9984c97e

Domain Name Analysis

You're looking at domain 'www.nurmas.com.tr' on the Turkish country-code top-level domain (.com.tr), featuring subdomain 'www'. The core label 'nurmas' covers 6 characters holding 2 vowels versus 4 consonants. Word splitting yields two words: nur, mas. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.93s

Total Load Time

5.5 MB

Total Size

Language Analysis

Primary Language

🇹🇷Turkish

Code: tr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:tr

Text Length:3,355 chars

Detector Agreement:75%

Website Classification

Primary Category

adult content93% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

93%

education learning

90%

government public service

85%

real estate property

81%

corporate business

79%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	188.132.187.6	Turkey	AS49334Sh Online Iletisim Anonim Sirketi
10	142.251.14.95Google · CDN	United States	AS15169Google LLC
10	142.251.20.94Google · CDN	United States	AS15169Google LLC
10	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
10	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
10	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
74	7	-	-