# fermuarlifletocepdikimi.com — Recorded security evidence | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/
Machine-readable companion: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-10-26 20:44:09 UTC
- Selected availability observation: 2026-11-02T11:47:15Z
- Stored record updated: 2026-11-02 11:47:15 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored labels and detections
- Automated brand label (collector metadata; not a confirmed impersonation finding): gmail
## Stored infrastructure
- Observed IP address: 86.105.4.234
- Registrar in stored WHOIS data: Isimtescil Bilisim A.S.
- Last stored HTTP status: 200 (observed: 2026-11-02T11:47:15Z)
- Registration date in stored WHOIS data: 2021-07-29 18:51:23 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a179fb-34df-76ee-9e40-f7fa10655d4c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/fermuarlifletocepdikimi.com
- Certificate Transparency search: https://crt.sh/?q=%25.fermuarlifletocepdikimi.com
- Web Archive lookup: https://web.archive.org/web/*/https://fermuarlifletocepdikimi.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy stores a record for fermuarlifletocepdikimi.com. Source observations are dated separately; missing checks do not establish safety.
PhishDestroy stores a record for fermuarlifletocepdikimi.com. Source observations are dated separately; missing checks do not establish safety.
A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: bc1d1a9a5b1fbfc291ced94197953345e6a1b31f122b416ccc194fb2dd11a45f
Source facts (timestamps as stored): {"record_id":1674240,"first_recorded_at":"2026-10-26 21:44:09","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":15,"suspicious":0,"vendors":{"VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"malware","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","MalwareURL":"malware","SafeToOpen":"phishing","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"observed_at":"2026-10-17T10:01:34Z","checked_at":null,"fetched_at":"2026-10-26T20:51:12Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","Fortinet","G-Data","Gridinsoft","Lionic","MalwareURL","SafeToOpen","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-17 10:01:34","checked_at":"2026-10-26 21:51:21","fetched_at":"2026-10-26 20:51:21","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"malware","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","MalwareURL":"malware","SafeToOpen":"phishing","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"vendor_names":["VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Seclookup","Gridinsoft","MalwareURL","SafeToOpen","BitDefender","Chong Lua Dao","alphaMountain.ai"],"stats":{"timeout":0,"harmless":47,"malicious":15,"suspicious":0,"undetected":30}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 00:02:07"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-27 00:30:38"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1674240,"scope":"checked_url","observed_at":"2026-11-02T11:47:15Z","http_status":200,"http_observed_at":"2026-11-02T11:47:15Z","stored_http_code":200,"stored_http_observed_at":"2026-11-02T11:47:15Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-01T23:48:41Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- Stored capture: https://i.ibb.co/YTcDrPHD/5b72d22eb901.png
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/01a179fb-34df-76ee-9e40-f7fa10655d4c.png
Captured: 2026-10-26 20:51:15 UTC
Source report: https://urlscan.io/result/01a179fb-34df-76ee-9e40-f7fa10655d4c/
- URLScan capture: https://urlscan.io/screenshots/01a11c0c-a886-75c3-b88a-d67f67c67383.png
Source report: https://urlscan.io/result/01a11c0c-a886-75c3-b88a-d67f67c67383/
- URLScan · 2026-02-18: https://screenshots.phishdestroy.io/us/019c70d2-9e1e-7540-ae5a-8011207c0e0d.png
Captured: 2026-02-18 12:56:24 UTC
Source report: https://urlscan.io/result/019c70d2-9e1e-7540-ae5a-8011207c0e0d/
SHA-256: 347e7f511948dc79374461857a9790f75cd4793224168f7d4e89ddd1cc4a5226
- URLScan · 2026-06-26: https://screenshots.phishdestroy.io/us/019f0457-cc65-71ed-b1b1-3545fcebedd3.png
Captured: 2026-06-26 14:31:55 UTC
Source report: https://urlscan.io/result/019f0457-cc65-71ed-b1b1-3545fcebedd3/
SHA-256: 894ce96dd38d13afcf86f8c65cc787c5069eda9d68c249804dd3f35254c8e4fd
- URLScan · 2026-07-02: https://screenshots.phishdestroy.io/us/019f24ad-ba5c-745f-95ee-ab3d5b5b69b0.png
Captured: 2026-07-02 21:13:25 UTC
Source report: https://urlscan.io/result/019f24ad-ba5c-745f-95ee-ab3d5b5b69b0/
SHA-256: 894ce96dd38d13afcf86f8c65cc787c5069eda9d68c249804dd3f35254c8e4fd
- URLScan · 2026-07-08: https://screenshots.phishdestroy.io/us/019f40e5-4336-72ed-9356-e04e506dad0c.png
Captured: 2026-07-08 08:43:24 UTC
Source report: https://urlscan.io/result/019f40e5-4336-72ed-9356-e04e506dad0c/
SHA-256: 894ce96dd38d13afcf86f8c65cc787c5069eda9d68c249804dd3f35254c8e4fd
- URLScan · 2026-08-28: https://screenshots.phishdestroy.io/us/01a049fb-8bc1-74de-accf-8adc3722f56e.png
Captured: 2026-08-28 20:07:04 UTC
Source report: https://urlscan.io/result/01a049fb-8bc1-74de-accf-8adc3722f56e/
SHA-256: b4f0e21b4bb51ffc49874b660c9804323b8857fe34ac74dfd5d38e79f973f547
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17a04-e52c-74c9-9421-68ccb517c1c8.png
Captured: 2026-10-26 21:01:50 UTC
Source report: https://urlscan.io/result/01a17a04-e52c-74c9-9421-68ccb517c1c8/
SHA-256: 7004e180c1a2d59dddd2badcea68de942cf00e14085f15c3c2e0a140cd62a28b
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/611d059c-fe04-486e-a49a-a7703aa4ddac.png
Captured: 2026-10-26 20:52:46 UTC
Source report: https://radar.cloudflare.com/scan/611d059c-fe04-486e-a49a-a7703aa4ddac
SHA-256: 86ce3f46789022a4801a79955ef8aa5b53c7f96040ccea539cc7891984a93f5f
- URLQuery: https://screenshots.phishdestroy.io/uq/2d2a3059-f9b7-4a75-a2e6-7b9badaea0ae.png
Source report: https://urlquery.net/report/2d2a3059-f9b7-4a75-a2e6-7b9badaea0ae
SHA-256: 31b8aa2cd1e5e9d085ff83a8dddedd926146e01b66c2aa658da4cc341b6615d8
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-10-26T20:55:40Z",
"uuid": "01a179fb-34df-76ee-9e40-f7fa10655d4c",
"scanned_at": "2026-10-26T20:51:15Z",
"final_url": "https://fermuarlifletocepdikimi.com/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://fermuarlifletocepdikimi.com/",
"from": "http://fermuarlifletocepdikimi.com/",
"status": 307
}
],
"ip": "86.105.4.234",
"ptr": "server1.datahost.net.tr",
"ips": [
"86.105.4.234"
],
"asns": [
"60647"
],
"countries": [
"TR"
],
"link_domains": [
"api.whatsapp.com",
"www.facebook.com",
"www.instagram.com",
"twitter.com",
"www.youtube.com",
"tr.wordpress.org",
"presscustomizr.com"
],
"social": [
"https://api.whatsapp.com/send",
"https://www.facebook.com/fletodikimi",
"https://www.instagram.com/fletocepdikimi",
"https://twitter.com/fletocepdikimi",
"https://www.youtube.com/channel/UCOGmkAU-pe4uDaizzNmvEqA"
],
"doc_hash": "f0cc3d91a2eef451cfb871f8f41334f5d63226da24cd605acff248a1d6e2d11f",
"script_hashes": [
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"501f611306d68d8af2978e88b9dbb98afc052add852592930f3a7755e66ae22e",
"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1",
"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9",
"2ce30d7191bbb10914bd18f45dfc4a4c6f8cec8d37b38e6d5b5669fcf31bdb5b",
"2449bcdb76bb77ecd953f38a63ed4bc38906758048eb24581013b24f023bdc97",
"61ccb2ff314af4b300014f1715b9e9b29f6aede9f25151e00722d5a4455c0ff2",
"1891b054a7cf74a81590ee3ea25baa920520a70de1e1ab716a8fe2639b827e00",
"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3"
],
"globals": [
"jQuery",
"wp",
"swv",
"wpcf7",
"_",
"HUParams",
"tcOutline",
"czrapp",
"Waypoint",
"_wpemojiSettings",
"_params",
"$_to_center_with_delay",
"twemoji"
],
"storage_keys": [
"wpEmojiSettingsSupports"
],
"tls": {
"san": [
"*.fermuarlifletocepdikimi.com",
"fermuarlifletocepdikimi.com"
],
"cipher": "AES_128_GCM",
"issuer": "YR1",
"subject": "*.fermuarlifletocepdikimi.com",
"protocol": "TLS 1.3",
"valid_to": "2026-11-25T07:25:14Z",
"valid_from": "2026-08-27T07:25:15Z"
},
"domain_age_days": 1914,
"apex_age_days": 1914,
"tls_age_days": 60,
"tls_valid_days": 89,
"requests": 35,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 61,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "LiteSpeed",
"content-type": "text/html; charset=UTF-8",
"link": "; rel=\"https://api.w.org/\""
}
},
"cf": {
"v": 1,
"fetched_at": "2026-10-26T20:55:42Z",
"uuid": "611d059c-fe04-486e-a49a-a7703aa4ddac",
"scanned_at": "2026-10-26T20:52:46Z",
"final_url": "https://fermuarlifletocepdikimi.com/",
"status": 200,
"history": [
{
"url": "https://fermuarlifletocepdikimi.com/",
"status": 200
}
],
"dom_hash": "56a314ebca7ecd3bd5eacd613a28e9d52ac0b14149e5d5c753779b9134adeaaa",
"doc_hash": "02338dfd96b3f817bcccdd4a6a98b277863b5fcf02600e6e4d35b154b23b09ba",
"domain_risks": [
"Business",
"Business & Economy"
],
"radar_rank": {
"bucket": ">200000"
},
"dns": [
{
"name": "fermuarlifletocepdikimi.com",
"type": "A",
"value": "86.105.4.234"
}
],
"dnssec_valid": false,
"ip": "86.105.4.234",
"whois": {
"registrar": "Isimtescil Bilisim A.S.",
"created": "2021-07-29T20:51:23Z",
"updated": "2026-08-27T07:48:07Z",
"expires": "2027-07-29T20:51:23Z",
"nameservers": [
"ns1.datahost.net.tr",
"ns2.datahost.net.tr"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-10-26T20:51:12Z",
"analysis_at": "2026-10-17T10:01:34Z",
"stats": {
"timeout": 0,
"harmless": 47,
"malicious": 15,
"suspicious": 0,
"undetected": 30
},
"detections": {
"VIPRE": "malware",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Webroot": "malicious",
"Fortinet": "malware",
"SOCRadar": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "phishing",
"MalwareURL": "malware",
"SafeToOpen": "phishing",
"BitDefender": "phishing",
"Chong Lua Dao": "malicious",
"alphaMountain.ai": "phishing"
},
"reputation": -11,
"votes": {
"malicious": 1
},
"tags": [
"dga"
],
"created": "2021-07-29T00:00:00Z",
"first_seen": "2023-12-30T05:58:17Z",
"dns": [
{
"ttl": 21600,
"type": "NS",
"value": "ns2.datahost.net.tr"
},
{
"ttl": 14400,
"type": "A",
"value": "86.105.4.234"
},
{
"ttl": 14400,
"type": "TXT",
"value": "v=spf1 +a +mx +ip4:86.105.4.234 include:relay.mailbaby.net ~all"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns1.datahost.net.tr"
},
{
"ttl": 21600,
"type": "SOA",
"rname": "pierrecassi.hotmail.com",
"value": "ns1.datahost.net.tr"
},
{
"ttl": 14400,
"type": "MX",
"value": "fermuarlifletocepdikimi.com",
"priority": 0
}
],
"dns_at": "2026-10-17T10:07:20Z",
"jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
"cert": {
"san": [
"*.fermuarlifletocepdikimi.com",
"fermuarlifletocepdikimi.com"
],
"issuer": "Let's Encrypt / YR1",
"serial": "520a43b74aced19eb86313f1b7cd7095a13",
"sha256": "d33c48ce0d01443c386e8d34b9dfd11dd41c5a4f71985b320796404348a7bead",
"subject": "*.fermuarlifletocepdikimi.com",
"valid_to": "2026-11-25T07:25:14Z",
"valid_from": "2026-08-27T07:25:15Z"
},
"whois": [],
"rdap": {
"status": [
"active"
],
"events": {
"expiration": "2027-07-29T20:51:23Z",
"registration": "2021-07-29T20:51:23Z",
"last update of RDAP database": "2026-10-10T23:56:10Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-10-26T20:56:05Z",
"mail_config": {
"mx": [
"fermuarlifletocepdikimi.com"
],
"spf": "v=spf1 +a +mx +ip4:86.105.4.234 include:relay.mailbaby.net ~all",
"dkim": [
"default"
],
"dmarc": true,
"dkim_bits": 2048,
"spf_lookups": 5
},
"caa_records": {
"domain": "fermuarlifletocepdikimi.com"
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-10-26T20:46:13Z",
"first": "2021-12-02T19:08:28Z",
"changes": 12,
"days_archived": 14,
"scans_per_day": 0.01,
"avg_page_bytes": 8033
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://fermuarlifletocepdikimi.com/wp-sitemap.xml",
"https://fermuarlifletocepdikimi.com/sitemap.xml",
"https://fermuarlifletocepdikimi.com/sitemap.html"
]
},
"sitemap": {
"present": true,
"url_count": 24
},
"social_tags": {
"title": "Fermuarli Fleto Cep Dikimi",
"robots": "max-image-preview:large",
"generator": "WordPress 7.1.3"
},
"trackers": {
"requests": 30
},
"mixed_content": {
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 200,
"timings": {
"dns": 159,
"tls": 78,
"wait": 8061,
"connect": 72,
"download": 79
},
"response_ms": 8449
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
21,
25,
53,
80,
110,
143,
443,
587,
993,
995,
3306
]
},
"dns_server": {
"ns": [
{
"ip": "193.25.218.123",
"host": "ns2.datahost.net.tr"
},
{
"ip": "193.25.218.123",
"host": "ns1.datahost.net.tr"
}
],
"zone": "fermuarlifletocepdikimi.com"
},
"location": {
"ip": "86.105.4.234",
"asn": "60647",
"org": "MERT TURKOGLU trading as DATAHOST INTERNET VE BILISIM TEKNOLOJILERI",
"city": "Bursa",
"country": "TR"
},
"ssl": {
"issuer": "Let's Encrypt / YR1",
"subject": "*.fermuarlifletocepdikimi.com"
},
"dns": {
"A": [
"86.105.4.234"
],
"MX": [
"{\"exchange\": \"fermuarlifletocepdikimi.com\", \"priority\": 0}"
],
"NS": [
"ns2.datahost.net.tr",
"ns1.datahost.net.tr"
],
"SOA": "{\"nsname\": \"ns1.datahost.net.tr\", \"hostmaster\": \"pierrecassi.hotmail.com\", \"serial\": 2026082705, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
"TXT": [
"v=spf1 +a +mx +ip4:86.105.4.234 include:relay.mailbaby.net ~all"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"get_ip": {
"ip": "86.105.4.234",
"family": 4
},
"redirects": {
"chain": [
"https://fermuarlifletocepdikimi.com"
]
},
"linked_pages": {
"external": [
"https://api.whatsapp.com/send",
"https://www.facebook.com/fletodikimi",
"https://www.instagram.com/fletocepdikimi/",
"https://twitter.com/fletocepdikimi",
"https://www.youtube.com/channel/UCOGmkAU-pe4uDaizzNmvEqA",
"https://tr.wordpress.org/",
"https://presscustomizr.com/hueman/"
],
"external_count": 7,
"internal_count": 23
},
"whois": {
"registrar": "Isimtescil Bilisim A.S.",
"created": "2021-07-29T20:51:23Z",
"updated": "2026-08-27T07:48:07Z",
"expires": "2027-07-29T20:51:23Z",
"status": [
"ok https://icann.org/epp"
],
"nameservers": [
"ns1.datahost.net.tr",
"ns2.datahost.net.tr"
]
},
"headers": {
"headers": {
"server": "LiteSpeed",
"content-type": "text/html; charset=UTF-8",
"link": "; rel=\"https://api.w.org/\""
}
}
}
}
```
## Complete dated records
Availability observations: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/fermuarlifletocepdikimi.com/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1674240,
"scope": "checked_url",
"observed_at": "2026-11-02T11:47:15Z",
"http_status": 200,
"http_observed_at": "2026-11-02T11:47:15Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-02T11:47:15Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "served_at_root",
"content_classification_at": "2026-11-01T23:48:41Z",
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```