# PhishDestroy domain threat record: destekmedikal.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/destekmedikal.com/ Machine-readable companion: https://phishdestroy.io/domain/destekmedikal.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 06:40:59 UTC - Last availability or vendor check: 2026-10-25 06:40:59 UTC - Stored record updated: 2026-10-25 08:04:20 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 165.227.140.224 - Registrar in stored WHOIS data: Realtime Register B.V. - Registration date in stored WHOIS data: 2026-01-18 08:16:48 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a171c9-648c-762d-8733-6324cd807ce6/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/destekmedikal.com - Certificate Transparency search: https://crt.sh/?q=%25.destekmedikal.com - Web Archive lookup: https://web.archive.org/web/*/https://destekmedikal.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/Kp4KgrZ9/e97adb19ad05.png Captured: 2026-10-25 06:40:59 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a171c9-648c-762d-8733-6324cd807ce6.png Captured: 2026-10-25 06:40:59 UTC Source report: https://urlscan.io/result/01a171c9-648c-762d-8733-6324cd807ce6/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3bcbb67a-95ad-4806-8ce5-bcca3b779975.png Captured: 2026-10-25 07:15:13 UTC Source report: https://radar.cloudflare.com/scan/3bcbb67a-95ad-4806-8ce5-bcca3b779975 SHA-256: 68e5e4ad3c210bcd8cda3a5c3bba595e152ba8eb3e12e311e412808cde5cf965 - URLQuery: https://screenshots.phishdestroy.io/uq/9ada9f44-0119-4d5f-a7a5-7e4e4e2c3138.png Source report: https://urlquery.net/report/9ada9f44-0119-4d5f-a7a5-7e4e4e2c3138 SHA-256: 5fa7a7fd9cdbddff4bd9efc5512c21fdc0aefa1d48f8e3b6f4330c97bf7b7f0f - URLScan ยท 2026-10-25: https://screenshots.phishdestroy.io/us/01a171bc-fd23-70cc-9f45-a7123173b040.png Captured: 2026-10-25 06:26:25 UTC Source report: https://urlscan.io/result/01a171bc-fd23-70cc-9f45-a7123173b040/ SHA-256: 33222bd9ba8c05a7c3779dcdfb6daacc933d5c16f5c6726546861c37544adfd0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T06:53:36Z", "uuid": "01a171c9-648c-762d-8733-6324cd807ce6", "scanned_at": "2026-10-25T06:39:58Z", "final_url": "http://destekmedikal.com/", "status": 200, "redirects": [ { "to": "https://destekmedikal.com/", "from": "http://destekmedikal.com/", "status": 307 }, { "to": "http://destekmedikal.com/", "from": "https://destekmedikal.com/", "status": 307 } ], "ip": "165.227.140.224", "ips": [ "165.227.140.224" ], "asns": [ "14061" ], "countries": [ "DE" ], "doc_hash": "6f1ad86f28b70ce45af20e3bd70f72f82c9e56eec8cdd360ff46dcb2aabc7a64", "script_hashes": [ "4ff2864049465d1bf49ad294ad798c6107efd6c5d5a0f766f1945350c37c6789", "7cd2cfec615cbd1e5f5f187721f43d287192539dfb4cd272c4df1af99b10d5ce", "40b506d9f7fc83fbbecda4091577580cb869e47a2592d97c860460574ec4e9e9", "3df8e7ed5e8cb312eac9522d4f6e0bebcb4a5769fac2203cbcb662a13a2f429f", "72000d8f442c0beac6a7af2066364ea6b747eb13d7fe4646039157752645fe97", "3bd7d42975315669db46009414b5135637e612165591245f5e696d770333a848", "e0e521696ce6e51b4ca033fc46bf43118853cd1ee01885fd9f39af8eaa091307", "6e69c8824a61ce4bed117bd5a18e16cfc543f864d15dbdeeb23c47ee1203d1e5", "59a20e36243bea9edfa06c9f391c706facb60afb0a6fa2877a612349ad16c56a", "b1730ea4b38eb8fabc2ecb0db0d383de926139cc3d953c229dba797200e9b6dd" ], "domain_age_days": 1348, "apex_age_days": 1348, "requests": 74, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T07:50:27Z", "uuid": "3bcbb67a-95ad-4806-8ce5-bcca3b779975", "scanned_at": "2026-10-25T07:15:13Z", "final_url": "https://destekmedikal.com/", "history": [ { "url": "https://destekmedikal.com/", "status": 0 } ], "dom_hash": "433a5e367a2aeb4769756ee4cc70d4ffb3e81ed2c2fddf9de5834d9d14dd2a4d", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "destekmedikal.com", "type": "A", "value": "165.227.140.224" } ], "dnssec_valid": false, "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Realtime Register B.V.", "created": "2026-01-18T09:16:48Z", "updated": "2026-01-18T09:16:50Z", "expires": "2027-01-18T09:16:48Z", "nameservers": [ "ns1.hosting.com.tr", "ns2.hosting.com.tr" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T07:47:05Z", "analysis_at": "2026-10-22T04:05:51Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-01-18T00:00:00Z", "updated": "2026-01-18T00:00:00Z", "first_seen": "2023-10-27T08:03:26Z", "dns": [ { "ttl": 900, "type": "A", "value": "165.227.140.224" }, { "ttl": 900, "type": "MX", "value": "destekmedikal.com", "priority": 0 }, { "ttl": 900, "type": "NS", "value": "ns1.hosting.com.tr" }, { "ttl": 900, "type": "NS", "value": "ns2.hosting.com.tr" }, { "ttl": 900, "type": "SOA", "rname": "noc.hosting.com.tr", "value": "ns1.hosting.com.tr" }, { "ttl": 900, "type": "TXT", "value": "v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all" } ], "dns_at": "2026-10-22T04:11:24Z", "jarm": "28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d", "cert": { "san": [ "destekmedikal.com" ], "issuer": "Let's Encrypt / YE2", "serial": "575dbe1a4283bb3328acb16d86505a27489", "sha256": "9e52c1e0164349bd39dcd11342ea386342ac9cec533de8aef4ba87c6b8eca6f3", "subject": "destekmedikal.com", "valid_to": "2026-09-29T08:40:34Z", "valid_from": "2026-07-01T08:40:35Z" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-01-18T09:16:48Z", "last changed": "2026-01-23T09:16:48Z", "registration": "2026-01-18T09:16:48Z", "registrar expiration": "2027-01-18T09:16:48Z", "last update of RDAP database": "2026-10-19T03:51:31Z" }, "registrar": "REALTIME REGISTER B.V.", "registrar_iana_id": "839" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T07:16:58Z", "mail_config": { "mx": [ "destekmedikal.com" ], "spf": "v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 1 }, "caa_records": { "domain": "destekmedikal.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T11:34:10Z", "first": "2010-03-11T19:31:41Z", "changes": 15, "days_archived": 25, "scans_per_day": 0, "avg_page_bytes": 1434 }, "ports": { "open": [ 22, 80 ] }, "dns_server": { "ns": [ { "ip": "77.245.156.176", "host": "ns1.hosting.com.tr" }, { "ip": "104.247.178.109", "host": "ns2.hosting.com.tr" } ], "zone": "destekmedikal.com" }, "location": { "ip": "165.227.140.224", "asn": "14061", "org": "DigitalOcean, LLC", "city": "Frankfurt am Main", "country": "DE" }, "dns": { "A": [ "165.227.140.224" ], "MX": [ "{\"exchange\": \"destekmedikal.com\", \"priority\": 0}" ], "NS": [ "ns1.hosting.com.tr", "ns2.hosting.com.tr" ], "SOA": "{\"nsname\": \"ns1.hosting.com.tr\", \"hostmaster\": \"noc.hosting.com.tr\", \"serial\": 2022020902, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 300}", "TXT": [ "v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "165.227.140.224", "family": 4 }, "subdomains": { "count": 27, "subdomains": [ "admin.destekmedikal.com", "api.destekmedikal.com", "app.destekmedikal.com", "assets.destekmedikal.com", "autodiscover.destekmedikal.com", "cpanel.destekmedikal.com", "cpcalendars.destekmedikal.com", "cpcontacts.destekmedikal.com", "dev.destekmedikal.com", "intranet.destekmedikal.com", "m.destekmedikal.com", "mail.destekmedikal.com", "mx01.destekmedikal.com", "qjdqsmail.destekmedikal.com", "shop.destekmedikal.com", "sitemap.destekmedikal.com", "sitemaps.destekmedikal.com", "webdisk.destekmedikal.com", "webmail.destekmedikal.com", "ww12.destekmedikal.com", "www.admin.destekmedikal.com", "www.destekmedikal.com", "www.intranet.destekmedikal.com", "www.m.destekmedikal.com", "www.mail.destekmedikal.com", "www.shop.destekmedikal.com", "www.sitemaps.destekmedikal.com" ] }, "whois": { "registrar": "Realtime Register B.V.", "created": "2026-01-18T09:16:48Z", "updated": "2026-01-18T09:16:50Z", "expires": "2027-01-18T09:16:48Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.hosting.com.tr", "ns2.hosting.com.tr" ] } } } ```