Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mrtkiralama[.]com
“Online Kurumsal Filo”
证据摘要
mrtkiralama.com is currently listed as a high‑risk credential‑phishing site. The domain was registered on 26 January 2026 through Ultahost, Inc. and is hosted behind Cloudflare, resolving to the IP address 188.114.97.3 which is identified as belonging to Cloudflare, Inc. in Canada. DNS resolution uses the Cloudflare authoritative nameservers aleena.ns.cloudflare.com and memphis.ns.cloudflare.com. The site presents a 301 redirect and serves an SSL certificate issued by Google Trust Services, indicating HTTPS availability. The front‑end stack includes Plesk, PHP, Bootstrap, Slick, jQuery, FancyBox and Google Analytics, with Cloudflare Browser Insights enabled. The only publicly visible attribute is the page title “Online Kurumsal Filo”, which does not reveal the targeted brand or credential collection method. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on the PhishDestroy blocklist. VirusTotal analysis shows 18 of 91 security vendors flag the domain, reinforcing the malicious classification. No additional intelligence on the phishing template or victim interaction is available. Given the observed infrastructure and the presence on a dedicated phishing blocklist, defenders should treat mrtkiralama.com as a confirmed credential‑phishing platform. Recommended actions include adding the domain and its resolving IP to network‑level deny lists, updating email security gateways to quarantine messages containing the domain, and monitoring for any future DNS or SSL changes. Continuous threat‑intel feeds should be consulted for potential campaign expansions.
已提交证据快照
- 已发送
- 台账记录
- 1
- 案件 ID
PD-20260318-58AEC0- 已捕获页面标题
- Online Kurumsal Filo
- PDF 文件
- PDF 证据
完整证据文本
Acceptable Use Policy: The domain mrtkiralama.com is engaged in phishing activities, which directly contravenes the policy prohibiting illegal activities, fraud, and deception.
Terms of Service: The registrar reserves the right to suspend or terminate services for violations, and the use of this domain for phishing constitutes a clear breach of these terms.
Applicable Laws (TR):
Turkish Penal Code No. 5237: Article 244 addresses computer fraud, making it illegal to deceive individuals for financial gain through electronic means.
Law on Regulation of Electronic Commerce No. 6563: This law includes provisions against deceptive practices in electronic communications, which are applicable to phishing activities.
Regulatory Note: Failure to act on this report may result in regulatory scrutiny and potential liability under Turkish law. Immediate action is recommended to mitigate risks associated with hosting this phishing domain.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
检测时间线
-
VirusTotal
0 → 2
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
取证情报
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of mrtkiralama.com · checked Mar 18, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控