Ruhsuz Panel Sorgu Infrastructure
Ruhsuz Panel Sorgu Infrastructure
Marked means Fraudpol holds verified indicators for this pattern: the domains, accounts and identities used in it, checked by our team on the date shown. It is a record of what was reported and checked, not a statement about any identified person.
- Status
- Reported, still active
- Category
- Other
- Regions
- Turkey
- Languages
- Turkish
- Platforms
- Telegram, Web
- Payment methods
- -
- Last verified
- Sep 27, 2026
Entries describe reported scam patterns and the identities used in them. They are not statements about identified people. Fraudpol is not an authority, and this is not an official notice.
What this scam pattern is
The threat actor operates a network of illicit "Sorgu" panel mirrors offering unauthorized lookup services for leaked personal identifiable information (PII). Victims are targeted through various public portals that require account registration and credential submission. Infrastructure shifts rapidly across multiple TLD mirrors to evade domain-level suspensions.
Platforms and payment methods involved
Platforms: Telegram, Web
Payment methods: -
Personas and aliases used
Invented company, broker or profile names reported in connection with this pattern.
How to recognise it
- Turkish-language Sorgu/Doxxing interface
- PII search portal (TCKN, address, phone lookup)
- Frequent domain mirror hopping (.website, .ink)
If you already paid
Do not interact with or submit personal credentials to unverified identity-lookup portals. If personal data has been exposed, report the breach to relevant local data protection authorities and monitor active accounts for unauthorized access attempts.
- Stop all payments and contact. Do not send a "release fee", tax or withdrawal charge — that is how the loss grows.
- Call your bank or card issuer straight away and ask about a recall or chargeback. For bank transfers, the first 72 hours matter most.
- Keep every message, receipt, wallet address and profile link. Screenshots with dates help the police and your bank.
- Report it to the police and, if the money went through a platform, to that platform. How to report a scam.
- Never pay anyone who promises to recover lost money — see recovery scams.
What we hold
Domain WHOIS history, DNS resolution logs, screenshots of the panel interface, and submitted registrar abuse correspondence across Cloudflare and Namecheap.
Verification
Last verified by the Fraudpol team on Sep 27, 2026. Entries not re-verified within 180 days are removed automatically.
Domains in this campaign
- ruhsuzpanel[.]websiteUnder review
- ruhsuzpanel1[.]websiteUnder review
- ruhsuzpanel[.]inkUnder review
- ruhsuzpanel[.]lifeOfflineThreat page
- ruhsuzpanel[.]xyzOfflineThreat page
- ruhsuzpanel1[.]cyouOfflineThreat page
- ruhsuzpanel[.]siteUnder review
- ruuhsuzpanel[.]cyouOfflineThreat page
- ruhsuzpanel[.]lolOfflineThreat page
- ruhsuzpanel9[.]comOfflineThreat page
- belsis[.]spaceOfflineThreat page
- belsis[.]inkOfflineThreat page
- belis[.]artOfflineThreat page