hayallerdekievim[.]com

The domain hayallerdekievim.com has been identified as a brand impersonation threat targeting the Turkish Government. The site impersonates the e-Devlet Kapısı, a legitimate government service, to deceive users into divulging sensitive information or performing actions that could compromise their security.

Analysis indicates that this domain has a VirusTotal (VT) score of 17/95, suggesting a moderate level of detection by security vendors. The domain was registered through Atak Domain on October 12, 2025, and resolves to the IP address 196.251.66.67, which is located in the Netherlands. The domain does not possess an SSL certificate, which increases the risk of data interception. The domain is currently listed on two security blocklists, and there is no indication that it is present in the Google Safe Browsing (GSB) database.

The current status of the domain is offline, indicating that it has been taken down or is no longer active. Despite this, users should remain vigilant, as the infrastructure and methods used in the campaign may still pose a risk. It is recommended that any individuals who have interacted with this domain change their passwords and monitor their accounts for any unauthorized activity. Additionally, organizations should update their security protocols to include this domain in their blocklists and educate their users about the risks of brand impersonation attacks.