interbahisresmigirisler[.]vip

interbahisresmigirisler.vip is currently listed as an active generic phishing infrastructure. DNS resolution points to 172.67.152.156, which belongs to Cloudflare, Inc. in Canada, and the domain is delegated to the Cloudflare nameservers kenneth.ns.cloudflare.com and nena.ns.cloudflare.com. HTTP requests receive a 301 redirect and the TLS handshake presents a certificate issued by Google Trust Services under the WE1 intermediate, indicating the site is using Cloudflare’s SSL termination. The page title returned by the server is "interbahisresmigirisler.vip | 520: Web server is returning an unknown error", suggesting the backend service is currently unavailable but the domain remains reachable. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It appears on the PhishDestroy blocklist and has been flagged by four of ninety‑one VirusTotal scanners, confirming the presence of malicious activity. No additional technical artifacts such as payload hashes or phishing kit identifiers are publicly disclosed. Defenders should block DNS resolution to the domain and any outbound connections to the associated IP address, monitor for attempts to access the URL, and consider adding the domain to internal URL filtering and email security policies. Ongoing monitoring is recommended to detect any changes in hosting or content that could indicate a shift in the phishing campaign.