sahabetimiz206[.]com

Analysis indicates that the domain sahabetimiz206.com was registered on April 28, 2026 through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to the Cloudflare IP address 172.67.175.102 and uses Cloudflare name servers lindsey.ns.cloudflare.com and rocco.ns.cloudflare.com, confirming the presence of Cloudflare infrastructure and HTTP/3 support. The site presents a TLS certificate issued by Let’s Encrypt (E8) and currently returns HTTP 525, indicating an SSL handshake failure. Threat intelligence shows the domain is listed on one public blocklist and is actively blocked by PhishDestroy. AlienVault OTX references eight pulses mentioning the domain, and VirusTotal reports twelve of ninety‑one scanners flagging it as malicious. The Gridinsoft trust score of 0/100 further corroborates a high risk assessment. The classification as generic_phishing is consistent with the observed indicators. While the exact payload or credential‑harvesting page has not been publicly disclosed, the combination of recent registration, low trust score, multiple detections, and active blocking suggests a high likelihood of phishing activity. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the associated IP and name servers, and update endpoint security signatures to reflect the twelve VirusTotal detections. Ongoing observation is recommended to capture any changes in the site’s behavior or additional intelligence.