marsbahisi-giris[.]com

The domain marsbahisi-giris.com was registered through NiceNIC International Group Co., Limited and created on February 27, 2026. It is delegated to the Cloudflare nameservers armfazh.ns.cloudflare.com and stephane.ns.cloudflare.com. DNS resolution points to the address 188.114.96.3, which belongs to Autonomous System AS13335 operated by Cloudflare, Inc., and is geolocated in the United States. No TLS certificate was observed for the host, indicating that the service is delivered without HTTPS protection.

The sole HTTP response captured displays a page title of "Just a moment..."; the site is currently reported as taken offline. Threat‑intelligence data shows the domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed. Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high confidence of malicious intent. VirusTotal analysis recorded five detections out of ninety‑three scanners, confirming that multiple security vendors consider the domain suspicious.

Although the exact phishing kit or targeted brand is not disclosed in the available data, the combination of a newly created domain, lack of encryption, low trust rating, and vendor detections strongly suggests a generic phishing operation. Defenders should add marsbahisi-giris.com to URL filtering and firewall deny lists, monitor DNS queries for the associated Cloudflare IP range, and consider sinkholing traffic to prevent user exposure. Continuous re‑evaluation is advised in case additional payloads or phishing pages become available, as the current evidence is limited to infrastructure and detection metrics.