cagateckinsaat[.]com

The domain cagateckinsaat.com has been identified as engaging in brand impersonation, specifically targeting the social media platform Instagram. No drainer kit has been detected on this domain, but the intent to deceive users into believing they are interacting with Instagram is clear from the page title 'ÇAĞATECK İNŞAAT' and other indicators.

Infrastructure analysis reveals that cagateckinsaat.com is registered through Atak Domain and resolves to the IP address 89.252.181.146, which is located in Turkey (AS42846 GNET Internet Telekomunikasyon A.S.). The domain was created on October 09, 2025. The website has an SSL certificate issued by Let's Encrypt, which has the serial number E8. On VirusTotal, 19 out of 95 security vendors have flagged this domain, indicating a moderate level of suspicious activity. The domain does not currently appear in Google's Safe Browsing (GSB) database but is listed on 2 security blocklists: PhishDestroy and PhishingDB.

The domain cagateckinsaat.com is currently offline, which suggests that it has been taken down or is no longer active. However, the elevated risk level remains due to its history of brand impersonation. Recommended response actions include continued monitoring of the domain for any signs of reactivation and ensuring that users are aware of the threat. The remaining risk includes potential future use of the domain for similar malicious activities, and organizations should remain vigilant and update their threat intelligence databases accordingly.