i-adeniburdanal[.]com

This domain, i-adeniburdanal.com, poses as the official Turkish government portal e-Devlet Kapısı to steal login credentials. Analysis indicates it is designed to harvest usernames, passwords, and potentially sensitive personal data from unsuspecting users attempting to access government services. The site mimics legitimate authentication pages, making it difficult for users to distinguish between the real and fraudulent portal without close inspection. Infrastructure analysis reveals multiple red flags confirming malicious intent. The domain was registered on February 21, 2026, an unusually future date suggesting an attempt to evade detection or appear legitimate. It is flagged by 20 out of 95 security vendors on VirusTotal, with detections including credential theft and phishing classifications. The domain resolves to IP address 149.202.251.86, hosted on OVH SAS infrastructure in France, and appears on one security blocklist. The SSL certificate (R13) does not match the expected issuer for a government site, further indicating fraudulent activity. If you visited i-adeniburdanal.com, immediate action is required to mitigate risk. First, assume any credentials entered have been compromised and change passwords for all accounts using the same login details, prioritizing email and financial services. Enable multi-factor authentication where available to add an extra layer of security. Monitor accounts for unusual activity, such as unauthorized logins or transactions, and report any suspicious behavior to the relevant service providers. Additionally, scan your device for malware using updated security software to ensure no secondary infections occurred. Users should also verify the authenticity of any government portals by accessing them directly through official channels rather than following links from emails or messages.