21tmmz-mrttking-giris[.]vip

This domain, 21tmmz-mrttking-giris.vip, was registered on July 20, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IP address 188.114.97.3. The authoritative name servers are ariella.ns.cloudflare.com and evan.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. Threat intelligence flags the domain as an active generic phishing site; it appears on a single public blocklist and has been listed by the PhishDestroy monitoring service.

VirusTotal records show the domain has been scanned by 91 antivirus and URL‑reputation engines, none of which have raised a detection at the time of analysis. The absence of a detection does not constitute evidence of benign behavior, particularly given the recent creation date and the active phishing classification. No public information is available regarding the site’s SSL certificate, HTTP response codes, or page title, leaving the content and target brand unverified.

Defenders should treat the domain as malicious until further evidence suggests otherwise. Recommended mitigations include adding the domain to outbound DNS blocklists, configuring web‑proxy and firewall rules to deny traffic to the IP address 188.114.97.3, and monitoring for any future detections in reputation services. Continuous re‑scanning with VirusTotal or similar platforms is advised to capture any later malicious payloads or changes in classification.