Scan report · about 1 month agoPublic

kurumsal.hayatfinans.com.tr

176.236.98.169AS34984 · TR

Submittedhttps://kurumsal.hayatfinans.com.tr/login

Verdict

0 of 7 enginesCleanAutomated

Looks safe

Automated

It asks for a password in a sign-in box that stays hidden in the page until you click — so the request only appears once you interact with it. Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 176.236.98.169TELLCOM-AS - Superonline Iletisim Hizmetleri A.S., TR · AS34984TR
TLS: CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE · expires Dec 6, 2026

3 suspicious

Hashes & fingerprints

Page Hash7a1c5989978a61ce85bce001fee00f05d9a517f08a0a2b2d0aeba3890e446eaf Favicon Hash926df3cfccd8e5d3644cbcf67f4b7bede2a2207360b4a4dda7ee7e3c41b567e7 DOM Hash88ab3e6d3ed4a2ab049a7d0fa99cc36bc5e3a8ce428167dc75c92142e224b7f9 Screenshot pHashafd4803f623bd4c1 JARM08d08d00000000000008d08d08d08d84545ef698c987657f06e193e11700de JA4Xa373a9f83c6b_2bab15409345_4396f85bf9fa Cert Thumbprint59477364C218EA9AAD8E56A3B6151D5B4F566576 Cert IssuerCN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE

Page capture

Live

Title “Hayat Finans İnternet Şubesi”

Visit Site

Engines

7 · time to verdict