dorukfundex[.]com

Analysis indicates that the domain dorukfundex.com was registered on 21 February 2026 through Metaregistrar BV and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. The domain is configured to use Cloudflare's authoritative nameservers brenda.ns.cloudflare.com and kirk.ns.cloudflare.com. No TLS certificate is presented, and HTTP requests return an offline status, consistent with the reported current status of the site being taken offline. The page title retrieved prior to takedown reads “Doruk Fundex - Resmi Platform | AI Ticaret 2025 | 10.000'den Fazla Yorum,” and the domain is explicitly associated with a social‑media phishing campaign that impersonates the cryptocurrency exchange Binance.

Gridinsoft assigns a trust score of 0 out of 100, indicating a lack of reputation. The domain appears on a single security blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain, providing additional corroboration of malicious intent. Given the combination of a fresh registration, lack of SSL, low trust score, and affiliation with Binance impersonation, defenders should proactively block DNS resolution for dorukfundex.com and enforce outbound traffic filtering for the associated IP 188.114.97.3.

Continuous monitoring of Cloudflare‑originating infrastructure for similarly named domains is advisable, as the attacker appears to leverage Cloudflare's network to obscure hosting location. Threat intelligence feeds should be updated to reflect the domain’s status and its association with social‑media phishing targeting Binance users. Organizations using Binance services should educate users about unsolicited social‑media messages that reference the “Doruk Fundex” brand and reinforce the use of official Binance URLs and two‑factor authentication.