betnis-guncelgiris[.]cfd

The domain betnis-guncelgiris.cfd is currently active and classified as a generic phishing infrastructure as of the report date August 07, 2026. The domain resolves to the IP address 172.67.188.97, an address that is part of the Cloudflare network, indicating the use of a large content delivery platform to mask the true origin of the malicious host. VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors, with none of those engines flagging it at the time of analysis; this absence of detections does not constitute evidence of benign behavior, only that existing signatures have not yet identified malicious payloads for this particular host.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one defensive platform has identified it as a threat vector. No additional intelligence such as registrar details, SSL certificate information, HTTP response codes, Safe Browsing verdicts, or Open Threat Exchange (OTX) mentions is presently available, leaving gaps in the attribution and operational profile. Given the limited public data, defenders should treat the domain as malicious until further verification can be performed.

Recommended actions include adding the domain to local blocklists, monitoring DNS queries for the IP 172.67.188.97, and employing URL filtering solutions that reference both the PhishDestroy block and the observed blocklist entry. Continuous re‑scanning with multi‑vendor services is advised to capture any future changes in detection status, and any newly observed indicators such as page titles or certificate details should be incorporated into threat‑intel feeds to improve detection accuracy.