sozenlojistik[.]com[.]tr[.]doramedya[.]com

This domain presents an elevated risk as a generic phishing threat, specifically designed to mimic the legitimate Sözen Lojistik Mersin brand. The site, now offline, was registered on March 11, 2026, and resolved to IP 79.133.41.61. With only 2 out of 95 security vendors flagging it on VirusTotal, its threat profile was initially underestimated, though it appears on one security blocklist. The domain was registered through Onlinenic Inc and used a Let's Encrypt SSL certificate (R12), lending a false sense of legitimacy.

PhishDestroy identified this threat through proactive monitoring. The domain impersonates a Turkish logistics company, likely targeting customers or partners for credential theft or financial fraud. Despite the low detection rate, the site's quick takedown indicates active monitoring. Users who accessed the site should change any credentials entered and monitor financial accounts for unusual activity.

To mitigate risks, avoid clicking links in unsolicited messages claiming to be from Sözen Lojistik. Always verify the URL by typing it directly into the browser. Report any suspicious emails or messages to the legitimate company's security team. Enable multi-factor authentication on all accounts and use a reputable security solution that can detect phishing domains based on behavior rather than signatures alone.