giris-gobahis[.]icu

The domain giris-gobahis.icu has been identified as a high-risk platform associated with fake login phishing attempts. Currently, there is no known brand being impersonated, which suggests a generic phishing strategy aimed at capturing user credentials through deceptive login pages.

Technical indicators for giris-gobahis.icu include a VirusTotal detection score of 1 out of 95 security vendors, indicating minimal recognition of malicious activity by automated scanning services. The domain was registered through Fewmoretaps OU, operating under the alias Trustname.com. The IP address associated with this domain is 188.114.97.3. The domain was created on June 20, 2026, which may indicate that the threat actor intends for it to be used for an extended period. Current status indicates it is still active, with no reported inclusion on major blocklists other than one threat intelligence pulse noted in AlienVault OTX.

As it stands, giris-gobahis.icu remains an active phishing threat, necessitating immediate response actions such as blocking access to the domain and educating potential targets about the risks of engaging with it. Continual monitoring is advised, especially considering the very low detection rate on VirusTotal, which may impair the automated defenses of users. Further, no widespread awareness appears to be in place regarding this domain, increasing the risk for unsuspecting users.