turkiyegirisbets10[.]vip

On July 29, 2026, threat‑intelligence analysts examined turkiyegirisbets10.vip, a domain created on June 11, 2026 and currently classified as an active generic phishing infrastructure with an elevated risk rating. The domain resolves to the IPv4 address 188.114.96.3 and is delegated to the Cloudflare nameservers duke.ns.cloudflare.com and nataly.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and potentially its CDN services to obscure the true hosting location. Registration was performed through Gname.com Pte. Ltd., a registrar that has been observed in prior malicious registrations, though no further registrant details are publicly available.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing organization has taken mitigation action against it. VirusTotal scans show that 15 out of 91 security vendors flagged the domain, suggesting a non‑trivial level of detection across independent scanners. No additional context such as page title, SSL certificate details, or HTTP response codes was available at the time of analysis, leaving the exact content and lure mechanisms of the site unverified.

Given the observable indicators—recent creation, Cloudflare‑based infrastructure, registration through a known registrar, blocklist inclusion, and multi‑vendor detections—defenders should treat turkiyegirisbets10.vip as malicious. Recommended actions include adding the domain to firewall and proxy deny lists, monitoring DNS queries for the associated IP address, and flagging any outbound traffic to the domain for deeper inspection. Ongoing collection of payload samples and URL redirects is advised to refine detection signatures and to confirm the phishing payloads associated with this infrastructure.