evelen[.]click

This domain is flagged as an elevated-risk fake real estate scam targeting Turkish-speaking users under the guise of a major housing project. Analysis indicates the site impersonates legitimate property developments, likely aiming to collect personal information or advance fees from prospective buyers. The specific threat type involves brand impersonation of "Yüzyılın Konut Projesi," a phrase commonly associated with high-value residential offerings in Turkey. Infrastructure analysis reveals the domain evelen.click was registered on November 28, 2025, through Global Domain Group LLC, a registrar frequently associated with abusive registrations. The domain resolves to Cloudflare IP 2606:4700:20::681a:a1a (AS13335) and currently lacks an SSL certificate, a red flag for phishing infrastructure. VirusTotal detections show 20 out of 95 security vendors flagging the domain as malicious. It appears on one security blocklist and is actively blocked by PhishDestroy. The page title "Yüzyılın Konut Projesi" directly mimics legitimate real estate marketing campaigns, increasing the likelihood of successful social engineering. Mitigation steps for this specific threat type include immediate blocking of the domain and associated IP at the network perimeter. Organizations should deploy web filtering rules to prevent access to evelen.click and monitor for similar domains using the same registrar or Cloudflare hosting patterns. End users should be educated to verify property listings through official developer websites or trusted real estate platforms, particularly when encountering unsolicited offers. Financial institutions and payment processors should flag transactions linked to this domain or its hosting infrastructure. Given the domain's current offline status, continuous monitoring for reactivation or rebranding attempts is recommended.