bahsegel-guncel-giris[.]cfd

Analysis of the domain bahsegel-guncel-giris.cfd as of 2026-08-03 indicates that the infrastructure is currently active. The domain was registered on 2026-07-31 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.96.3, which is hosted on Cloudflare’s network as evidenced by the four authoritative name servers: georgia.ns.cloudflare.com, malavika.ns.cloudflare.com, newt.ns.cloudflare.com, and wils.ns.cloudflare.com. No SSL certificate details are provided, and HTTP response characteristics have not been observed. The domain has been submitted to VirusTotal and examined by 91 anti‑malware vendors; none of the scanners have raised a detection at the time of the scan.

While the absence of detections does not confirm safety, it suggests that the payload, if any, may be non‑file‑based or has evaded known signatures. The domain is listed on a single public blocklist, PhishDestroy, which classifies the entry as a phishing indicator. No additional blocklists, Safe Browsing entries, or Open Threat Exchange reports are currently associated with the domain. Given the recent creation date, the use of a reputable DNS provider, and the lack of public analysis of the hosted content, the confidence level of the threat assessment remains limited.

Defenders should monitor DNS queries for the domain, block resolution to 188.114.96.3 at the network perimeter, and consider adding the domain to local URL filtering policies. Continuous re‑scanning with sandbox services and periodic VirusTotal submissions are recommended to detect any future changes in payload behavior. Until concrete content is observed, precautionary blocking and heightened alerting for traffic to this host are advisable.