cetinelektrik.com.tr - URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned cetinelektrik.com.tr and returned a unknown verdict (score -12). The page resolved to 94.199.205.231 on AEROTEK-AS - CIZGI TELEKOMUNIKASYON ANONIM SIRKETI, TR in TR. 4 domains and 1 IP were contacted, over 3 HTTP requests. 9 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/1607248e81608d---61123670422.pdf - Domain: cetinelektrik.com.tr · IP: 94.199.205.231 · AS42807 · TR
- Page title: Sayfa bulunamadı – Çetin Elektrik AŞ.
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Sep 30 01: · subject CN=cetinelektrik.com.tr
- HTTP requests captured: 3
- Scan tier: fast · observed 2026-08-17 06:03:11 UTC
Redirect chain
http://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/1607248e81608d---61123670422.pdfhttps://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/1607248e81608d---61123670422.pdf
Malware communicating with this URL (9)
These samples were observed contacting or being served from cetinelektrik.com.tr. Each links to its full analysis.
- Phishing - referenced ·
2e6c84587653da5c6b9adc606dd1fb2b· first seen 2026-08-17 - Phishing - referenced ·
2b14fa5dea91d534c4d220844a61f49e· first seen 2026-08-16 - Phishing - referenced ·
80bd30da46ffde3e29a85bd3d2ea7566· first seen 2026-08-16 - Phishing - referenced ·
e56645b4da908b39ebee21c2b7d966b9· first seen 2026-08-15 - Phishing - referenced ·
e931154fd0b24c35c309e6ea573906ad· first seen 2026-08-15 - Phishing - referenced ·
3aafb169f6689066cdff2297e0e152e9· first seen 2026-08-15 - Phishing - referenced ·
ab78008a0e3067bcaf4e32a7adafe4bf· first seen 2026-08-14 - Phishing - referenced ·
6180b495f31d166cc6682290bb5bd34c· first seen 2026-08-13 - Phishing - referenced ·
f4167b17ae2a42496a3ada3d55cf1442· first seen 2026-08-12
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- PHP
- WordPress
Contacted infrastructure
- 94.199.205.231 - AS42807 AEROTEK-AS - CIZGI TELEKOMUNIKASYON ANONIM SIRKETI, TR (TR)
Observed indicators
- cetinelektrik.com.tr
- gmpg.org
- fonts.gstatic.com
- farahcreative.com
- 94.199.205.231
- https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/1607248e81608d---61123670422.pdf
- http://gmpg.org/xfn/11
- https://fonts.gstatic.com/
- https://cetinelektrik.com.tr/feed/
- https://cetinelektrik.com.tr/comments/feed/
- https://cetinelektrik.com.tr/wp-includes/css/dist/block-library/style.min.css?ver=7.0.4
- https://cetinelektrik.com.tr/wp-content/themes/zakra/inc/customizer/customind/assets/fontawesome/v6/css/all.min.css?ver=6.2.4
- https://cetinelektrik.com.tr/wp-content/themes/zakra/style.css?ver=4.3.1
- https://cetinelektrik.com.tr/wp-json/
- https://cetinelektrik.com.tr/xmlrpc.php?rsd
- https://cetinelektrik.com.tr/wp-content/uploads/2023/02/cropped-cetin-logo-fav-32x32.png
- https://cetinelektrik.com.tr/wp-content/uploads/2023/02/cropped-cetin-logo-fav-192x192.png
- https://cetinelektrik.com.tr/wp-content/uploads/2023/02/cropped-cetin-logo-fav-180x180.png
- https://cetinelektrik.com.tr/
- https://cetinelektrik.com.tr/wp-content/uploads/2021/11/ce-logo.png
Other scans of cetinelektrik.com.tr (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/1606d17e8 - 21 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/160baceac - 15 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/16071c334 - 15 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/161357f30 - 15 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/1609c7c59 - 13 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/16133f06c - 12 Aug 2026 - unknown ·
https://cetinelektrik.com.tr/wp-content/plugins/formcraft/file-upload/server/content/files/161058036
Questions about cetinelektrik.com.tr
- Is cetinelektrik.com.tr safe?
- The scan of cetinelektrik.com.tr on 17 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with cetinelektrik.com.tr?
- 9 analysed samples communicate with this URL, including Phishing.
- How was cetinelektrik.com.tr checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of cetinelektrik.com.tr
Scanned on MalwareAnalyzer by Cyble · Open interactive scan