dosyatakipsistemi[.]com

This domain, dosyatakipsistemi.com, was registered on February 21, 2026, through Dynadot LLC and is classified as a generic phishing site. As of July 23, 2026, the domain resolves to IP 188.114.97.3, hosted on Cloudflare's infrastructure (AS13335) and protected by Cloudflare nameservers (ariella.ns.cloudflare.com, troy.ns.cloudflare.com). The site returned an HTTP 403 status with a page title indicating it was flagged as a suspected phishing site by Cloudflare. No specific brand or scam category is identified in the available data, and the exact content of the phishing page remains unanalyzed. Analysis indicates the domain is flagged by 16 of 95 security vendors on VirusTotal, appears on one security blocklist, and is recorded in a single AlienVault OTX threat intelligence pulse.

The SSL certificate is issued by Google Trust Services (WE1), and the site uses HTTP/3, consistent with Cloudflare's standard configuration. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. The domain is currently offline, likely due to Cloudflare's intervention or registrar action. Defenders should treat this domain as confirmed malicious based on multi-vendor detections and blocklist presence.

The HTTP 403 status and Cloudflare's warning page suggest the hosting provider has already mitigated the immediate threat, but the domain remains a potential indicator of compromise (IOC) for retrospective log analysis. No evidence links this domain to a specific phishing kit or targeted brand, so generic phishing detection rules should suffice for monitoring. If logs show internal traffic to this domain, investigate for credential theft or malware delivery attempts. The registration age (under six months) and Cloudflare hosting are typical of short-lived phishing campaigns, so defenders should prioritize blocking the domain and its associated IP across security controls.