denizlibayramogluminikepce[.]com

The domain www.denizlibayramogluminikepce.com is currently active and classified as a generic phishing site. It was registered on 11 March 2026 through Isimtescil Bilisim A.S. and resolves to the IPv4 address 188.132.129.55. The site returns HTTP 200 and is listed on the PhishDestroy blocklist, indicating ongoing malicious use. Infrastructure analysis shows the IP 188.132.129.55 belongs to the Turkish autonomous system AS214036 operated by Ultahost, Inc. The domain uses four authoritative name servers—ns1.ultahost.com through ns4.ultahost.com—consistent with the hosting provider. TLS is provided by a Let’s Encrypt R12 certificate, and the server software is identified as Nginx with HSTS enabled. The front‑end of the page is built with Bootstrap, jQuery and FancyBox, and the visible title reads “DENİZLİ BAYRAMOĞLU MİNİ KEPÇE”. These components are typical of credential‑harvesting pages that mimic legitimate services, and the use of Turkish language suggests targeting of Turkish‑speaking users. No additional branding or legitimate content is observed beyond the title. VirusTotal has flagged the domain in 9 out of 95 security vendor scans, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high‑risk classification. The domain appears on one public blocklist (PhishDestroy) and the risk level is marked as high. The combination of recent registration, dedicated hosting, and the observed technology stack supports the conclusion that the site is being used to collect sensitive credentials. Defenders should add www.denizlibayramogluminikepce.com and its resolving IP 188.132.129.55 to network blocklists and DNS filtering policies. Continuous monitoring of the associated name servers and any future subdomains is advised, as the attacker may expand the campaign. Incident response teams should treat any login attempts to the site as compromised and advise affected users to change credentials immediately.