Security Scan Report: www.vergidairesi.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 20 HTTP transactions. The main domain is vergidairesi.org and was registered 1 week ago.

Submitted URL: https://www.vergidairesi.org/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Phishing clone of Turkey's e-Devlet login on a 1-day-old domain, harvesting national ID and e-Devlet password and exfiltrating them via a Telegram bot token; Safe Browsing social-engineering hit.

Risk Factors (5)
Brand impersonation of a government identity service (e-Devlet Kapısı)
Harvests national ID number and e-Devlet password
Telegram bot token in inline script for credential exfiltration
Domain only 1 day old and absent from Umbrella rankings
Google Safe Browsing social-engineering detection
Domain age information unavailable

Details

Page Title

vergidairesi.org

Scan Type

public

Domain Name Analysis

The domain 'www.vergidairesi.org' uses the non-profit oriented generic top-level domain (.org) and includes subdomain 'www'. Its registrable label 'vergidairesi' stretches across 12 characters holding six vowels versus six consonants. Word splitting yields four words: verg, id, aires, i. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.vergidairesi.org/

Page Load Overview

1.10s
Total Load Time
357 KB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:tr
Text Length:1,044 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service28% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2085.187.142.76United Kingdom
AS209341WHG Hosting Services Ltd
201--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10FA2419018995A2D534A4D8D424BFB263E4AC293DF4EB85476ECA3F62FE6D14040F36F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:DwG5v/oFJT+c57k+cmUoBcZ6NtttVll17BoltNt1tvllmqjtt1Dh+6d9pHLthxL5:DwGuD5KZY8cSrFLtPdXPESB0Cps4uFA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22232:TLijMjbLEEDBBBAaRAxyQFplgB4h/eOUa2oFM8gIgBDAoRST5wIOMgA3Cg0gKIFGQApFUZUBBBlwQHEsliFSgCkip4gY5IC0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcdcccfcfce4c0fb
Perceptual Hash:f699a96689632699
Difference Hash:00101808686d0402
Wavelet Hash:f8c8c4fcfce4c0e0
Color Hash:N/A

Other Hashes

Crop Resistant:00101808686d0402

Scan History

Scan history not available

Unable to load historical scan data