pepsico[.]altintas-goldcap-tr[.]com

The domain pepsico.altintas-goldcap-tr.com was registered on March 03, 2026 through Realtime Register B.V. and resolves to the Cloudflare address 104.21.87.20, which is located in the United States and assigned to ASN13335 (Cloudflare, Inc.). The domain is currently taken offline, and no SSL certificate is presented for the host. A simple HTTP request returns the default XAMPP welcome page, as indicated by the page title "Welcome to XAMPP," suggesting that the underlying server is either a misconfigured test environment or an abandoned staging instance.

On VirusTotal the domain attracted attention from 13 of 94 scanning vendors, reflecting a moderate detection rate among the examined security products. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, reinforcing its classification as a phishing vector. Risk scoring places the threat at an elevated level, consistent with the presence of multiple vendor detections and blocklist inclusion.

While the offline status limits immediate exploitation, the infrastructure details—Cloudflare hosting, lack of TLS, and the XAMPP landing page—provide actionable indicators for defenders. Security teams should continue to monitor the IP address 104.21.87.20 for any future activation, enforce network-level blocking of the domain, and consider adding the host to internal deny lists. Additional scrutiny of related subdomains under the same registrar may reveal further malicious artifacts, and any future HTTP responses should be examined for credential‑stealing forms or redirects that would confirm the phishing intent.