# PhishDestroy domain threat record: gerigetirmeduasi.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gerigetirmeduasi.com/
Machine-readable companion: https://phishdestroy.io/domain/gerigetirmeduasi.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 21:16:40 UTC
- Last availability or vendor check: 2026-10-27 23:00:31 UTC
- Stored record updated: 2026-10-27 23:30:56 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 186.242.129.149
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-15 04:13:19 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gerigetirmeduasi.com
- Certificate Transparency search: https://crt.sh/?q=%25.gerigetirmeduasi.com
- Web Archive lookup: https://web.archive.org/web/*/https://gerigetirmeduasi.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed gerigetirmeduasi.com on its internal blocklist as a suspicious domain based on automated risk indicators. The site was first observed by PhishDestroy on 2026-10-27, twelve days after its registration on 2026-10-15. A page fetch on 2026-10-27 returned HTTP 200 and the recorded title “Geri Dönüşüm Kutuları: Renkleri, Anlamları ve Fiyatları 2026”. A later URLScan capture on 2026-05-15 showed a 404 response but did not alter the existing classification.

How the scam works
A suspicious domain may be used to host deceptive content that encourages visitors to disclose credentials, click malicious links, or download unwanted software, but no specific malicious functionality was observed on the captured page. The page title suggests a recycling‑bin article, which does not itself indicate phishing or malware.

Evidence
VirusTotal analysis on 2026-10-26 recorded 15 detections out of 92 engines, with vendors labeling the domain as phishing, malicious or suspicious. Google Safe Browsing checked on 2026-10-27 did not flag the site. URLScan captured a redirect to HTTPS and a 404 page; its engine score was 81 (malicious) while the overall verdict was non‑malicious on 2026-05-15. Cloudflare Radar marked the domain as malicious (malware) on 2026-10-27, OTX listed three pulses, and PhishDestroy’s internal blocklist contains the domain while external lists showed only a Cloudflare Family block.

Infrastructure
The domain was registered with Dynadot Inc on 2026-10-15 and was marked clientTransferProhibited. DNS records observed on 2026-10-27 listed an A record pointing to 186.242.129.149 and authoritative nameservers bryce.ns.cloudflare.com and rosemary.ns.cloudflare.com. The TLS certificate captured on 2026-10-16 was issued by Let’s Encrypt, covered gerigetirmeduasi.com (and www), and was valid until 2027-01-14. Scans recorded open ports 21, 80, 443 and 3306 at the time of observation.

What to do
Visitors should avoid entering any credentials or personal information on the site; if they have already done so, they should change any affected passwords promptly. No wallet‑related recommendations apply because no cryptocurrency activity was observed. Defenders can block the domain at network perimeters, monitor for connections to 186.242.129.149, and update threat‑intel feeds with this PhishDestroy assessment. Review access logs for any requests to the domain and treat any suspicious activity according to your organization’s incident‑response procedures.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8ffb9bc9-3824-41ec-97d2-05640fbb8eb6
Stored capture screenshot: https://urlscan.io/screenshots/019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43.png
Cloudflare Radar screenshot (2026-10-27T21:17:14Z): https://screenshots.phishdestroy.io/cf/8ffb9bc9-3824-41ec-97d2-05640fbb8eb6.png
URLScan screenshot (2026-05-14T17:00:36Z): https://screenshots.phishdestroy.io/us/019e276e-bdb2-763b-a668-32ab7373bf9f.png
URLScan capture report: https://urlscan.io/result/019e276e-bdb2-763b-a668-32ab7373bf9f/
URLScan screenshot (2026-10-27T21:17:03Z): https://screenshots.phishdestroy.io/us/01a17f39-36ea-718d-a813-545e5fcd5897.png
URLScan capture report: https://urlscan.io/result/01a17f39-36ea-718d-a813-545e5fcd5897/
VirusTotal report: https://www.virustotal.com/gui/domain/gerigetirmeduasi.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gerigetirmeduasi.com
Archived copy: https://web.archive.org/web/20261027211708/https://gerigetirmeduasi.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 21:51:45 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43.png
  Captured: 2026-10-27 21:16:40 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43.png
  Source report: https://urlscan.io/result/019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43/
- URLScan · 2026-05-14: https://screenshots.phishdestroy.io/us/019e276e-bdb2-763b-a668-32ab7373bf9f.png
  Captured: 2026-05-14 17:00:36 UTC
  Source report: https://urlscan.io/result/019e276e-bdb2-763b-a668-32ab7373bf9f/
  SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17f39-36ea-718d-a813-545e5fcd5897.png
  Captured: 2026-10-27 21:17:03 UTC
  Source report: https://urlscan.io/result/01a17f39-36ea-718d-a813-545e5fcd5897/
  SHA-256: 596de7293853feb99e7bd0db96338a3d75f024546e296eaa13c21eb416cea961
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8ffb9bc9-3824-41ec-97d2-05640fbb8eb6.png
  Captured: 2026-10-27 21:17:14 UTC
  Source report: https://radar.cloudflare.com/scan/8ffb9bc9-3824-41ec-97d2-05640fbb8eb6
  SHA-256: 7d5009c76af59350f654dfac2c1048a50410560c797ee6e8069242ca251ee2d8

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T21:17:33Z",
        "uuid": "019e2abc-dec8-77f4-b0fa-f9bdcd0d9f43",
        "scanned_at": "2026-05-15T08:24:48Z",
        "final_url": "https://gerigetirmeduasi.com/",
        "status": 404,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gerigetirmeduasi.com/",
                "from": "http://gerigetirmeduasi.com/",
                "status": 307
            }
        ],
        "ip": "159.203.6.231",
        "ips": [
            "159.203.6.231"
        ],
        "asns": [
            "14061"
        ],
        "countries": [
            "CA"
        ],
        "doc_hash": "ecf14b9ebe7061cddc7e2097a66c90692cc9c1d70d96b5f7ebdd14a0dbb61f54",
        "tls": {
            "san": [
                "gerigetirmeduasi.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "E8",
            "subject": "gerigetirmeduasi.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-08-12T12:09:21Z",
            "valid_from": "2026-05-14T12:09:22Z"
        },
        "domain_age_days": 2839,
        "apex_age_days": 2839,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 81,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx/1.26.3",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T21:17:36Z",
        "uuid": "8ffb9bc9-3824-41ec-97d2-05640fbb8eb6",
        "scanned_at": "2026-10-27T21:17:14Z",
        "final_url": "https://gerigetirmeduasi.com/",
        "status": 200,
        "history": [
            {
                "url": "https://gerigetirmeduasi.com/",
                "status": 200
            }
        ],
        "dom_hash": "b8489fb8ef4d23ce2bc2a538719ee5e15c7c67004d74f80cd4ebf6a53abfb5e7",
        "doc_hash": "65546b7afcfc0a2ef6c79b3f3fb1c6bee330eded52e2338f493b6bcea2c7523e",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gerigetirmeduasi.com",
                "type": "A",
                "value": "186.242.129.149"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.2",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-15T06:13:19Z",
            "updated": "2026-10-16T12:02:31Z",
            "expires": "2027-10-15T06:13:19Z",
            "nameservers": [
                "bryce.ns.cloudflare.com",
                "rosemary.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T21:48:08Z",
        "analysis_at": "2026-10-26T02:58:50Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 13,
            "suspicious": 2,
            "undetected": 32
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-10-15T06:13:19Z",
        "expires": "2027-10-15T06:13:19Z",
        "updated": "2026-10-16T12:02:31Z",
        "first_seen": "2025-08-20T16:04:22Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "bryce.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "bryce.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "186.242.129.149"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "rosemary.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-26T03:04:12Z",
        "jarm": "27d27d27d00027d00042d43d00041dba951fb796b4b956c9799ba19149e94a",
        "cert": {
            "san": [
                "gerigetirmeduasi.com",
                "www.gerigetirmeduasi.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "530de7f15f98de3adeac48d77fe61e606e7",
            "sha256": "515c368e84beb52a0680d1d938eea4268ce9fc2da5b894afab190b4bea803bb5",
            "subject": "gerigetirmeduasi.com",
            "valid_to": "2027-01-14T12:11:27Z",
            "valid_from": "2026-10-16T12:11:28Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-10-15T06:13:19Z",
            "updated": "2026-10-16T12:02:31Z",
            "expires": "2027-10-15T06:13:19Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "bryce.ns.cloudflare.com",
                "rosemary.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-15T06:13:19Z",
                "last changed": "2026-10-16T12:02:31Z",
                "registration": "2026-10-15T06:13:19Z",
                "registrar expiration": "2027-10-15T06:13:19Z",
                "last update of RDAP database": "2026-10-23T11:22:06Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T21:17:55Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gerigetirmeduasi.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T21:17:08Z",
            "first": "2012-06-28T04:44:15Z",
            "changes": 29,
            "days_archived": 59,
            "scans_per_day": 0.01,
            "avg_page_bytes": 3683
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://gerigetirmeduasi.com/sitemap_index.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://gerigetirmeduasi.com/",
            "title": "Geri Dönüşüm Kutuları: Renkleri, Anlamları ve Fiyatları 2026",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "ogImage": "https://gerigetirmeduasi.com/wp-content/uploads/2026/10/geri-donusum-kutulari-1.jpg",
            "ogTitle": "Geri Dönüşüm Kutuları: Renkleri, Anlamları ve Fiyatları 2026",
            "generator": "WordPress 7.1.3",
            "ogSiteName": "gerigetirmeduasi.com",
            "description": "Geri dönüşüm kutuları renkleri ve anlamları nelerdir? Mavi, sarı, yeşil ve gri kutuların kullanımını, fiyatlarını, yapımını ve nerede bulunduğunu öğrenin.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://gerigetirmeduasi.com/",
            "ogDescription": "Geri dönüşüm kutuları renkleri ve anlamları nelerdir? Mavi, sarı, yeşil ve gri kutuların kullanımını, fiyatlarını, yapımını ve nerede bulunduğunu öğrenin."
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn-reach.hostinger.com/js/embed.js"
            ],
            "upgrade_insecure": true,
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 37,
                "tls": 39,
                "wait": 11,
                "connect": 57,
                "download": 15
            },
            "response_ms": 159
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                80,
                443,
                3306
            ]
        },
        "carbon": {
            "bytes": 110824,
            "co2_grams": 0.0041,
            "cleaner_than": 20
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.77",
                    "host": "rosemary.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.137",
                    "host": "bryce.ns.cloudflare.com"
                }
            ],
            "zone": "gerigetirmeduasi.com"
        },
        "location": {
            "ip": "186.242.129.149",
            "asn": "47583",
            "org": "Hostinger DE",
            "city": "Frankfurt am Main",
            "country": "DE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "gerigetirmeduasi.com"
        },
        "dns": {
            "A": [
                "186.242.129.149"
            ],
            "NS": [
                "rosemary.ns.cloudflare.com",
                "bryce.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"bryce.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417674293, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": "upgrade-insecure-requests",
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "186.242.129.149",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://gerigetirmeduasi.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.gerigetirmeduasi.com"
            ]
        },
        "linked_pages": {
            "internal_count": 4
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-15T06:13:19Z",
            "updated": "2026-10-16T12:02:31Z",
            "expires": "2027-10-15T06:13:19Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "bryce.ns.cloudflare.com",
                "rosemary.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "LiteSpeed",
                "content-type": "text/html; charset=UTF-8",
                "x-powered-by": "PHP/8.3.36",
                "content-security-policy": "upgrade-insecure-requests"
            }
        }
    }
}
```