Phishing Bildirimi Hakkında Deneyim Sahibi Olan Var Mı?

Dear Abuse teams,
CIRCL is the CERT/CSIRT (Computer Emergency Response Team/Computer Security Incident Response Team) for the private sector, communes and non-governmental entities in Luxembourg.
We found out that at the time of writing the following website appears to be compromised and is actively being abused for phishing credentials or redirecting to a phishing site.

hXXp://ozalinsaat[.]com/doc/3/ Lookyloo permanent URL: hXXps://lookyloo[.]circl[.]lu/tree/70ceb41e-a60e- 494b-995e-9adb63123590 3 out of 90 positive detections in VT - hXXps://www[.]virustotal[.]com/gui/ url/9e7cc4459eb55df1febbd2a02864235012a7251293e0c7332b d47585f02a060c/ detection/u-9e7cc4459eb55df1febbd2a02864235012a7251293e0c7332b d47585f02a060c- 1633521806 89[.]252[.]180[.]81 is announced by NETINTERNET Netinternet Bilisim Teknolojileri AS, TR (51559). Position 2484/13619.
hXXps://sites[.]google[.]com/view/je-reconfirme-mon-numero-sourc 1 out of 90 positive detections in VT - hXXps://www[.]virustotal[.]com/gui/ url/90d8757418309fd2a4c68817c35741f28bca55e96c1512b6cd afccc3f4065577/ detection/u-90d8757418309fd2a4c68817c35741f28bca55e96c1512b6cd afccc3f4065577- 1633520646 142[.]250[.]186[.]174 is announced by GOOGLE, US (15169). Position 7621/13619. 2a00:1450:4001:82b::200e is announced by GOOGLE, US (15169). Position 7621/13619.

Please remove the phishing components from your web server. We would appreciate if you could share the collected information with us for warning the victims. Patch all applications (content management systems, plugins and alike) and server components (web server, ftp and alike) to the latest version and review the security settings of all components.
Please note: sometimes phishing sites redirect to legitimate sites. In this automated processing of phishing, we cannot always avoid to notify owners of legitimate sites and falsely inform them about their site being a phishing site. Please contact info@circl.lu in a separate mail about your whish to whitelist your domain.
You can find a collection of best practices on our web site: https:// www.circl.lu/pub/tr-26/
Don't hesitate to get back to us if you have further questions or need additional support.
We would appreciate if you confirm the reception of this report.
With kind regards, -- CIRCL - Computer Incident Response Center Luxembourg 16, boulevard d'Avranches - L-1160 Luxembourg http://www.circl.lu/