VirusTotal
21 / 91
BildirInterpretation & limits
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
Domain security report
ooteeweuyuweh293892dhu2.fly.dev
“Official Documents”
Tehdit kararı
KritikAlan Adı İtirazı
Assessment sources
Assessment based on the stored source evidence below. Review sources →
Kullanılabilirlik
İçerik kullanılamıyor
En son gözlemde içerik mevcut değildi
Gözlemlenen · HTTP probe
Risk sinyalleri
VirusTotal algılamaları: 21/91
URLQuery threat systems: 5 alerts
Automated brand label: Generic
Google Safe Browsing: threat flag recorded
- Kayıt kuruluşu
- Fly
- Resolved IP
- 66.241.125.152
- Registered
- 14.03.2026
Stored captures
3 sourcesThe capture source is temporarily unavailable.
In this reportGet help
Rapor özeti
ooteeweuyuweh293892dhu2.fly.dev — İçerik kullanılamıyor. Marka kimliğine bürünme: Generic; Dolandırıcılık türü: Credential Phishing. Kanıt özeti: VirusTotal 21/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CTX AI); URLQuery 5 alerts; URLScan malicious verdict; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 100/100. Kayıt kuruluşu: Fly.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Additional indicators at a glance
VirusTotal
21 det.
URLQuery
5 threat alerts
DNS Security
6/14
CF Radarı
Zararlı
URLScan
Scamadviser
1/100Very Likely Unsafe
TLS sertifikası
Within stored validity dates
Let's Encrypt · Hostname coverage not recordedHosting
Fly.io
Yaş
7 mo
Gözlemlenen durum
İçerik kullanılamıyor
DestroyList
Listelenmiş
Reports Sent
1
Source evidence
11 · sourcesThese are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
URLQuery
5 threat-system alerts
BildirInterpretation & limits
Alerts refer to the preserved scan. They do not describe the current state of the site.
CF Radarı
provider verdict: malicious
Observation time not recorded
Bildir Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
URLScan verdict
malicious
BildirInterpretation & limits
This is the recorded automated analysis. Completion alone is not a safety verdict.
DNS engellemeleri
6/14
Observation time not recorded
Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Scamadviser
1/100
Observation time not recorded
Bildir Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Google Safe Browsing
Threat flag recorded
BildirInterpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
PhishStats
checked — no match recorded
Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
OTX
no community references
BildirInterpretation & limits
Community publication references, not a vendor verdict or evidence of a common operator.
URLScan capture
saklanan rapor
View stored capture ↗Observation time not recorded
Bildir Interpretation & limits
A preserved page image documents what the collector received; a capture is not a safety verdict.
Public blocklists
0 external matches
AyrıntılarInterpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Ağ Güvenliği İstihbaratı
DNS Provider Blocks
6 / 14
Threat Detection Systems
5 alerts
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | ooteeweuyuweh293892dhu2.fly.dev |
phishing | Phishing Block |
| Hagezi Threat Feed | ooteeweuyuweh293892dhu2.fly.dev |
malicious | Sinkholed |
| Cloudflare DNS | ooteeweuyuweh293892dhu2.fly.dev |
malicious | Sinkholed |
| Quad9 DNS | ooteeweuyuweh293892dhu2.fly.dev |
malicious | Sinkholed |
| DNS4EU | ooteeweuyuweh293892dhu2.fly.dev |
malicious | Sinkholed |
Free Hosting Detected
Fly.io
This domain is hosted on Fly.io (free hosting platform). Free hosting platforms are commonly used for both legitimate testing/development and malicious purposes. Additional context is needed for a def
Kanıt özeti
AI-assisted analysis Stored narrative · generated . Provider checks below retain their own observation dates. This narrative is an interpretation of collected evidence, not an independent source verdict.
This domain, ooteeweuyuweh293892dhu2.fly.dev, operates as a credential theft site designed to harvest sensitive login information by impersonating official documentation portals. Analysis of the page title, 'Official Documents,' indicates an attempt to deceive users into submitting credentials under the guise of legitimate administrative or corporate materials. The site employs social engineering tactics to exploit trust in institutional communications, likely targeting employees, contractors, or individuals handling confidential data. Infrastructure analysis reveals the domain was registered through Fly on March 14, 2026, and resolves to the IP address 66.241.125.152, hosted under AS40509 (Fly.io, Inc.) in the United States. The domain appears on one security blocklist and is flagged as phishing by Google Safe Browsing. VirusTotal detection metrics show 21 out of 95 security vendors have classified this domain as malicious, with the SSL certificate issued by Let's Encrypt (serial number E8). The domain remains active as of this report, indicating ongoing operational status. Users who have visited ooteeweuyuweh293892dhu2.fly.dev should immediately revoke any credentials entered on the site and monitor associated accounts for unauthorized activity. Network administrators are advised to block the domain and its resolving IP (66.241.125.152) at the perimeter. Affected systems should undergo a security review to detect potential malware or persistent threats. If financial or personally identifiable information was submitted, users should follow incident response protocols for data breach mitigation, including notifying relevant authorities and implementing credit monitoring where applicable.
Data coverage & collection
24 · datasets with records / 7 · not recorded
What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.
Recorded dataPartial recordUTC
- VirusTotal
- 21 / 91 · engine detections
- URLScan analysis
- Automated verdict retained
- URLQuery
- 5 · recorded detections / alerts
- Google Safe Browsing
- Threat flag recorded
- OTX publications
- 0 · community references
- External blocklists
- 0 · external matches
- PhishStats
- Dated lookup retained
- Cloudflare Radar
- maliciousCollection time not recorded
- DNS security filters
- 6 / 14 · provider blocksCollection time not recorded
- Scamadviser
- 1/100 · provider trust scoreCollection time not recorded
- Spamhaus DBL
- Collection time retained; verdict missing
- Domain registration
- FlyCollection time not recorded
- Network & DNS
- 66.241.125.152 · 0 · nameserversCollection time not recorded
- TLS sertifikası
- Let's Encrypt
- Page captures
- 3 · retained captures
- Page analysis
- 1 · automated brand labels
- Observed indicators
- 0 · wallet / Telegram indicators
- Detection & evasion
- Stored browser and crawler comparison
- PageSpeed performance
- 66/100 · mobile performance
- Response records
- 1 · outgoing report records
- Availability history
- 17 · stored state changes
- Source observation history
- 2 · stored source events
- Topluluk raporları
- Aggregate report counts and dates
- IP reputation
- Network-level observations
Not recorded in this report 7
These checks have no retained result. This does not mean they passed or that a scan is running.
- Gridinsoft
- HTML archives
- Site configuration files
- Recorded subdomains
- Lookalike relationships
- Chainabuse records
- Wayback archive
Download the dated observations and supporting metadata.
Adli İstihbarat
Blocklist records
0 · external source matches
Genel Engelleme Listesi Durumu
Domain, network & archive
Fly · 66.241.125.152 · DNS, TLS and retained responses
Domain details
Alan adı
URLScan verdict
Zararlı
score 100 Phishing brand: Adobebrand: Genericemail report ↗
Google Safe Browsing
İşaretlendi
Social engineering checked 14.03.2026
IP itibarı
abuse score 0/100 0 reports checked 14.07.2026
Platform sağlayıcısı
Fly
(Unknown)
Teknik ayrıntılarProvenance & timestamps
İlk Kez Tespit Edildi14.03.2026
DOM Analysis
Submitted URLhttp://ooteeweuyuweh293892dhu2.fly.dev/
Vaka kimliği
Network & certificates
Stored technical evidenceNetwork & DNS
- Resolved IP
- 66.241.125.152
- Network ASN
- AS40509
- Organization
- Fly.io, Inc.
- Observed location
- Pitkin, US
- Server header
- Fly/0b532ef5e9 (2026-03-13)
Location describes the IP network.
TLS sertifikası
- Issuer
- Let's Encrypt
- Valid from
- 2026-02-21 23:24:17
- Valid until
- 2026-05-22 23:24:16
- Hostname coverage
- Hostname coverage not recorded
- Validity
- Stored certificate expired
- Collection time
- 2026-03-15 05:39:39 UTC
- Collection source
- PhishDestroy collector
Certificate fingerprint
aeb9f779a83cbce72a3fbbfe36b5bd76d3be5e3afa18b333f91ae884f7da58b5Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Latest Classified Outcome 2026-10-17 08:21:17 UTC
Primary outcome
DNS etkin değil
reason: DNS NXDOMAIN 80% confidence
Attribution
source: Dns Cache
Evidence layers
Availability: DNS inactive
Content: Unreachable
DNS: NXDOMAIN
Registration: Unknown
Latest HTTP observation
Bilinmiyor Probe Inconclusive 20% 2026-10-17 01:08:26 UTC
RDAP registration
Bilinmiyor
Observed timeline
last reachable: 2026-03-23 22:18:01 UTC current episode first observed: 2026-09-30 16:14:55 UTC observed RIP window: 2026-03-23 22:18:01 UTC → 2026-09-30 16:14:55 UTC · 4,577.95h midpoint estimate ≈ 2026-06-27 07:16:28 UTC · precision very low · basis bounded
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Teknolojiler · 11 identified
Bootstrap
UI frameworks
Fly.io
Cloudflare
CDN
Unpkg
SweetAlert
reCAPTCHA
jQuery
JavaScript libraries
HSTS
Güvenlik
Google Hosted Libraries
cdnjs
Popper
Detected via Cloudflare Radar · Wappalyzer engine
Bu Alan Adını Bildir
Kanıt sunun ve başkalarını korumaya yardımcı olun
VirusTotal Analizi
21 / 91 güvenlik sağlayıcıları bu alanı işaretledi
View on VT
Last analyzed Previous stored snapshot: 21 detections
ADMINUSLabs
Criminal IP
alphaMountain.ai
BitDefender
CTX AI
CyRadar
Emsisoft
Forcepoint ThreatSeeker
Fortinet
G-Data
Google Safebrowsing
Gridinsoft
Lionic
Sophos
VIPRE
Webroot
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of ooteeweuyuweh293892dhu2.fly.dev · checked Mar 14, 2026
66
Needs Work
Performance
FCP
5.2s
First Contentful Paint
LCP
5.35s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
96ms
Total Blocking Time
SI
5.33s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Registration & observation details8
Availability observations
- Last reachable observation
- Outcome first observed
- Observation window starts
- Observation window ends
- Estimated change time
- Observation window · hours
- 4577.95
- Estimate basis
- Bounded by observations
- Estimate precision
- very_low
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Detection & evasion checks
Stored browser and crawler observations
Tespit ve kaçınma analizi
Gizleme ve trafik dağıtımı kontrolü
Gözlemlenmemiştir
Kaydedilen taramada herhangi bir gizleme tespit edilmedi
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
- Kaydedilmiş gizleme bayrağı
- Gözlemlenmemiştir
- Gizleme puanı
- 0/6
- Son gizleme taraması
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='ooteeweuyuweh293892dhu2.fly.dev', port=80): Max retries exceeded with url: / (Caused by Ne
TDS'da canlı parmak izi kontrolü
Yedi Keitaro göstergesi ve tarayıcı ile bot karşılaştırması. Yeni tarama yalnızca düğmeye bastığınızda başlar.
Kayıtlı sonuç
Erişilemiyor
Timeline & response
1 · outbound report records
Forensic History & Detection Timeline
ThreatLifecycleTelemetry
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
-
Domain Status Transition 2026-08-07 01:21:32 UTCSource: PhishDestroy monitoring
Event details
Domain state transitioned from alive to dead. -
VirusTotal Detections Update 2026-03-14 14:24:21 UTCSource: VirusTotal
Event details
VirusTotal scanner detections updated from 0 to 22. Added scanner alerts: ADMINUSLabs, BitDefender, Chong Lua Dao, Criminal IP, CyRadar, DNS8, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safebrowsing, Gridinsoft, LevelBlue, Lionic, Netcraft, OpenPhish, Phishtank, Sophos, alphaMountain.ai.
Stored observation history19
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
probe_inconclusive
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
probe_inconclusive
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
Earlier observations 14
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
probe_inconclusive
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
probe_inconclusive
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
probe_inconclusive
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
origin_unreachable · http_5xx
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
origin_unreachable · http_5xx
-
Availability monitor · Recorded state
Bilinmiyor→dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
dns_inactive→Bilinmiyor
origin_unreachable · http_5xx
-
Availability monitor · Recorded state
dns_inactive
dns_nxdomain
-
Availability monitor · Recorded state
Erişilebilir→Mevcut değil
-
VirusTotal · Detection count
0→22
Tehdit Müdahale Pipeline
Keşif
Analysis
Notifications
Monitoring
18 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
Tehdit Alındı
ooteeweuyuweh293892dhu2.fly.dev tespit edildi ve kapsamlı analiz için sıraya alındı
URLScan.io Capture
Kaydedildi URLScan report with capture artifacts
URLScan Verdict
URLScan returned a malicious verdict · score 100
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
21/91 recorded on VirusTotal
Google Safe Browsing
Flagged via Google Şeffaflık Raporu
DNS Security Blocks
Blocked by 6 of 14 checked DNS providers: Cloudflare family, Cloudflare security, Controld adblock, Controld family
Free Hosting: Fly.io
Site hosted on Fly.io — free hosting platforms are frequently used for throwaway phishing sites
CF Radar: Malicious
Cloudflare Radar classified this domain as Security threats, phishing, Phishing
Brand Impersonation
Impersonation of Generic
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Rapor, depolanan teknolojiyi veya adli analiz sonuçlarını içerir.
Content Observed Unavailable
İzleme, kullanılamayan bir yanıt kaydetti (HTTP 502); nedeni bağımsız olarak belirlenmemiştir.
VT Detection +22
+22 new detections (0 → 22): ADMINUSLabs, BitDefender, Chong Lua Dao, Criminal IP +16
Sent Report Recorded
Stored outgoing record associated with registrar Fly, 1 abuse contact
abuse@fly.io
DestroyList Yayınlandı
Listed in the public PhishDestroy/DestroyList repository
Content Observed Unavailable
En son saklanan kontroller, rapor edilen içeriğin mevcut olmadığını gösteriyor; bu, değişikliğe kimin veya neyin sebep olduğunu belirlemez.
İlk erişilemezliğe kadar geçen süre
Tespitten ilk kullanılamayan gözleme kadar 2792 saat geçti.
How we investigate & report
Public scans, evidence and abuse channels
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups
urlscan.io
Screenshot · DOM · HTTP
Capture the rendered page, requests and visible infrastructure.
VirusTotal
Multi-engine verdicts
Compare the available engine results and retain the analysis timestamp.
Google Safe Browsing
Transparency Report
Check whether Google currently lists the URL as unsafe.
Cloudflare Radar
DNS · certificates · categories
Inspect a public scan and its recorded network and classification data.
AlienVault OTX
Threat-intelligence pulses
Look for indicator references and related community intelligence.
Wayback Machine
Historical evidence
Compare archived captures and preserve historical context.
abuse.ch ThreatFox
IOC correlation
Look for matching indicators and associated threat records.
crt.sh
Certificate Transparency
Inspect certificate records and related hostnames.
DNS Security Filters
Quad9 · AdGuard · CleanBrowsing
Compare security resolver responses and record observed blocking.
Web-Check
Surface inspection
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels
- Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
- Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
- Send the report. Keep outgoing report records and recipient information when available.
- Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
GoogleSafe Browsing↗
GoogleWeb Risk↗
MicrosoftSmartScreen↗
VirusTotalURL analysis↗
CloudflareRadar / abuse reporting↗
YandexSafe Browsing↗
URLScan.ioPublic scan↗
ESETSample / URL submission↗
BitdefenderURL submission↗
NortonSafe Web↗
SymantecSite İncelemesi↗
AviraURL reporting↗
Avast / AVGURL reporting↗
KasperskyOpenTIP↗
Dr.WebOnline scanner↗
NetcraftAbuse reporting↗
PhishTankCommunity reporting↗
APWG eCXPhishing intelligence↗
PhishStatsPublic feed↗
Phish.ReportHosting abuse↗
SpamhausDomain reputation↗
PolySwarmMulti-engine analysis↗
CheckPhishURL scan↗
QutteraMalware scan↗
URLqueryBrowser analysis↗
Criminal IPAsset intelligence↗
CRDFThreat Center↗
ScamadviserReputation check↗
MyWOTCommunity reputation↗
Related infrastructure
Shared hosting, registrar records and related domains
İlgili Altyapı ve Raporlar
- Doğrudan bağlantı Aynı kayıt bilgilerini veya aynı kimlik avı kitini paylaşır.
- Destek sinyali Altyapıyı veya hedef markayı paylaşır; tek bir operatörün kanıtı değildir.
- Yalnızca keşif Gezinti için listelenmiştir; bu ana bilgisayarla ortak hiçbir özelliği yoktur.
Her bir satır, bir etki alanının bu ana bilgisayara bağlanmasının bir nedenini gösterir. Düğüm boyutu, VirusTotal adresindeki algılamaları gösterir; kesikli çizgili düğümler ise halihazırda çevrimdışı durumdadır. Tam listeler aşağıda yer almaktadır.
İçerik eşleşiyor 1
Bu sunucuyla aynı favicon hash değeri veya aynı sayfa başlığı.
Generic kimlik taklidi 8
Bu alan adları, Generic kullanıcılarını da hedef almaktadır. Tüm “Generic” tehditlerini görüntüle →
Aynı kayıt kuruluşu: Fly 1
Aynı kayıt kuruluşu aracılığıyla kaydedilmiştir. Bir kayıt kuruluşu, birbiriyle hiçbir bağlantısı olmayan milyonlarca müşteriye hizmet verdiğinden, bu durum bir bağlantıyı kanıtlamaktan ziyade raporları bir araya getirmektedir.
Son tehdit raporları 6
PhishDestroy veritabanından yeni eklenen raporlar. Bu keşif bağlantıları, paylaşılan altyapı veya mülkiyet anlamına gelmez.
Community records
Retained community reports and observations
Topluluk raporları
1 topluluk üyesi tarafından bildirildi; ilk görülme 14.03.2026
- Kayıtlı raporlar
- 1
- Bildirilen benzersiz URL’ler
- 1
Kabul edildi1
Evidence & investigation tools
Original reports, independent checks and evidence links
Kanıtlar ve Dış Raporlar
Güvenlik Analizi
Gönderilen kanıt anlık görüntüsü
Sent: Ledger records: 1
Case ID:
PD-20260314-5FDF17 Recipient: abuse@fly.io Page title stored with report: Official Documents
PDF notice generated Notice text archived (650 chars)
Abuse notice text as sent to the provider
Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
OSINT ve İstihbarat
DNS ve Ağ
SEO ve Alan Adı
Derinlemesine Analiz
Help & reporting
Recovery steps, reporting contacts and complaint drafts
Help & reporting
Bu Siteden Etkilendiniz mi?
7 evidence signal groups linked
1 stored notification records
İçerik kullanılamıyor
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Official reporting routes
FBI IC3
Report online
Amerika Birleşik Devletleri'nde internet bağlantılı suçları bildirin
Federal tips line1-800-CALL-FBI
Action Fraud
Report online
İngiltere, Galler ve Kuzey İrlanda'da dolandırıcılık ve siber suçları bildirin
Contact centre0300 123 2040
PhishDestroy listing review Bir kolluk kuvveti raporu değil
Alan Adı İtirazı
Bu alanın sahibiyseniz ve girişin hatalı olduğunu düşünüyorsanız inceleme isteğinde bulunun
Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
97 ülke rehberi
Template-based draft · optional AI wording assistance requires separate consent
Yapay zeka destekli taslak — olay ayrıntıları yapay zeka sağlayıcısı tarafından işlenir · Kendiniz inceleyin ve gönderin
Mağdurlara Yönelik Öneriler ve Tavsiyeler
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Hemen ne yapmalıyım?
AcilStop using the suspicious site. Open the real service through its official app or an address you already trust.
- Tüm şifreleri değiştir — e-posta, Exchange hesapları, aynı şifreyi paylaşan her şey
- 2FA'yı etkinleştir bir kimlik doğrulama uygulaması kullanarak (SMS değil). SMS tabanlı kurtarma özelliğini devre dışı bırakın
- Kartları dondur eğer kimlik avı sitesine banka bilgilerinizi girdiyseniz
Raporum için hangi bilgileri toplamalıyım?
FBI yönergeleriKeep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
- Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
- Kesin tarih ve saatler — her işlemin ve dolandırıcıyla ilk teması
- Ekran görüntüleri — dolandırıcılık amaçlı web siteleri, sohbet mesajları, e-postalar, cüzdan işlemleri, sosyal medya
- Tüm URL'ler ve alan adları dolandırıcı tarafından kullanılan (şunlar dahil)
ooteeweuyuweh293892dhu2.fly.dev) - İletişim — dolandırıcının kullandığı e-postalar, kısa mesajlar, telefon numaraları ve kullanıcı adları
Tüm ayrıntıları bilmeseniz bile — yine de şikayette bulun. Kısmi bilgiler de soruşturmalara yardımcı olmaktadır.
Bu dolandırıcılığı nereye bildirmeliyim?
- FBI IC3 — İnternet Suçları Şikayet Merkezi (ABD federal bildirim sistemi)
- Europol — Avrupa siber suç ihbarları (AB)
- Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
- Yerel polis — hemen harekete geçemese bile resmi bir kayıt oluşturur
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
How do phishing scams typically work?
- Sahte web siteleri — alan adları hafifçe değiştirilmiş, orijinal sitelerin piksel düzeyinde birebir kopyaları
- Domuz kesimi — Telegram, WhatsApp ve flört uygulamaları aracılığıyla haftalarca süren bir süreçte kurulan güvenin ardından paranın çalınması
- Geri kazanım dolandırıcılıkları — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
- Yapay zeka destekli dolandırıcılıklar — deepfake’ler, otomatik kimlik avı ve yapay zeka tarafından oluşturulan siteler, dolandırıcılığın tespit edilmesini zorlaştırıyor
Gelecekte kendimi nasıl koruyabilirim?
- Resmi siteleri yer imlerine ekle — e-postalardaki, özel mesajlardaki veya reklamlardaki bağlantılara asla tıklamayın
- Etki alanlarını doğrula — kontrol et PhishDestroy etkileşime geçmeden önce. HTTPS'yi, yazım hatalarını ve alan adının yaşını kontrol edin
- "Gerçek olamayacak kadar iyi" = dolandırıcılık — garantili getiri, ünlülerin desteği, acil son tarihler
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin
Bu Rapor Hakkında: ooteeweuyuweh293892dhu2.fly.dev
Bu rapor, PhishDestroy'un kullanabileceği en son saklanan kanıtları sunar. Kaynak zaman damgaları mümkün olan yerlerde gösterilir; Stok durumu ve satıcı kararları toplama sonrasında değişebilir.
Yakalanan site “Official Documents” sayfa başlığını gösteriyordu ve Generic'nin kimliğine bürünüyor olabilir.
2026-06-28 02:20:18 UTC itibarıyla ooteeweuyuweh293892dhu2.fly.dev, 21 güvenlik motorlarından tespitler aldı.
Each source records a particular observation. A screenshot, an available website, or a result with no detections does not establish that a site is safe. Source results can change after they are collected.
Bu listenin hatalı olduğunu düşünüyorsanız itirazda bulunmak. Metodolojimiz hakkında bilgi edinmek için SSS sayfası adresini ziyaret edin.