diff --git a/http/osint/phishing/amazon-phish.yaml b/http/osint/phishing/amazon-phish.yaml
index 7d0a59bfff..01087a0683 100644
--- a/http/osint/phishing/amazon-phish.yaml
+++ b/http/osint/phishing/amazon-phish.yaml
@@ -8,7 +8,7 @@ info:
     An amazon phishing website was detected
   reference:
     - https://amazon.com
-  tags: phishing,amazon,osint
+  tags: phishing,amazon,osint
 
 http:
   - method: GET
@@ -48,5 +48,6 @@ http:
           - '!contains(host,"amazon.pl")'
           - '!contains(host,"amazon.se")'
           - '!contains(host,"amazon.ae")'
+          - '!contains(host,"amazon.com.tr")'
         condition: and
 # digest: 4a0a0047304502201fd4d7d24929de66852a16f075e85d17adff74989810b1f451c74af789d8da30022100d0e27220b66ad8944944fe23973351e43581c878b9404f1e1faa9876f69cf8c1:922c64590222798bb761d5b6d8e72950
\ No newline at end of file