girispanelebasvuru[.]com

The domain girispanelebasvuru.com was registered on November 03, 2025 through Global Domain Group LLC and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP address 94.183.168.45, which is assigned to ASN AS213995 (Belenkii Ivan Alexandrovich) and geolocates to Iran. No SSL certificate was observed for the host, indicating that HTTPS connections are not available. The page title returned by the server, "e-Devlet Kapısı," aligns with the declared brand target of the Turkish Government, confirming the impersonation intent.

Threat intelligence sources report that 16 of 95 security vendors on VirusTotal flagged the domain as malicious, and the same count of 16 threat‑intel pulses on AlienVault OTX reference the indicator. The domain appears on a single external blocklist and has been blocked by the PhishDestroy service. Gridinsoft assigned a trust score of 0 out of 100, underscoring the high confidence that the site is used for fraudulent activity.

While the site’s HTTP status and page content have not been captured due to its offline state, the combination of registrar information, hosting location, detection counts, and the matching page title provides sufficient evidence to classify the domain as a brand‑impersonation threat with an elevated risk rating. Defenders should ensure that DNS resolvers block queries to girispanelebasvuru.com, add the associated IP address to network‑level blacklists, and monitor any residual traffic for signs of credential harvesting attempts targeting Turkish Government services. Continuous reconciliation with threat‑intel feeds, including updates from VirusTotal, AlienVault OTX, and blocklist aggregators, is recommended to maintain coverage as the indicator evolves.