guvenlisite-girislerim[.]life

Analysis of the domain guvenlisite-girislerim.life indicates that it was registered on 26 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is hosted on Cloudflare infrastructure, using the authoritative name servers achiel.ns.cloudflare.com and mckinley.ns.cloudflare.com, and resolves to the IPv4 address 104.18.23.98. The domain appears on a single security blocklist and has been flagged by the PhishDestroy feed as a generic phishing site. VirusTotal records show that the domain was submitted for scanning and examined by 91 antivirus and URL‑reputation engines; at the time of the latest scan none of the engines reported a detection.

While the lack of detections does not imply benign intent, it confirms that the domain has not yet been classified by those vendors. No additional public intelligence such as OTX, Safe Browsing, or SSL certificate details is currently available, and the HTTP response code and page title have not been disclosed. The limited visibility suggests that the campaign is in an early stage or that automated crawlers have not yet harvested the site content. Defenders should consider adding the domain to outbound filtering rules, monitor DNS queries for resolutions to 104.18.23.98, and enforce blocklist updates that include the current entry.

Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in the payload or hosting configuration. Organizations that rely on the targeted brand should educate users about unsolicited login requests and advise verification through official channels. Until further evidence emerges, the domain remains active and should be treated as a potential phishing vector.