holigan-girisadresi1[.]vip

The domain holigan-girisadresi1.vip has been assessed as an elevated risk for generic phishing. The site poses a significant threat by attempting to deceive users into divulging sensitive information such as login credentials or financial data.

This domain is flagged by 3 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among the security community regarding its malicious nature. The domain was registered through Dynadot Inc and has been taken offline as of the latest assessment. Infrastructure analysis reveals that it resolved to the IP address 172.67.140.7 and was created on March 22, 2026. The site is currently blocked by MetaMask, PhishDestroy, and SEAL, and it appears on three security blocklists. The page title found was 'Index of /', which suggests it may have been used to host or direct users to malicious content. The domain also utilized Cloudflare Browser Insights and Cloudflare for its infrastructure, along with HTTP/3 for improved performance.

To mitigate the risks associated with this phishing domain, users are advised to avoid visiting or interacting with holigan-girisadresi1.vip. Network administrators should ensure that the domain is blocked in firewalls and DNS filters to prevent accidental access. Additionally, security teams should monitor for any similar domain names or IP addresses that may be part of a broader phishing campaign. Regularly updating security software and educating users on the signs of phishing can further reduce the likelihood of successful attacks.