girisgunceladres[.]vip

The domain girisgunceladres.vip is identified as a credential theft scam and is currently offline. The domain was registered on February 21, 2026, and appears to have been part of a phishing campaign targeting user credentials.

Analysis indicates that girisgunceladres.vip has been flagged by 3 of 95 VirusTotal vendors, suggesting potential malicious activity. The domain is registered through NiceNIC International Group Co., Limited and resolves to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services / WE1, which may have been used to instill a false sense of security. The domain has been present on 1 security blocklist, further indicating its involvement in malicious activities. Despite these red flags, the domain has a relatively low detection rate, which could be due to its recent creation or sophisticated evasion techniques.

As the domain is currently offline, it is recommended that users remain vigilant and avoid visiting it until its status is confirmed to be safe. Security teams should monitor the domain for any signs of reactivation and ensure that it remains blocked in network security configurations. Additionally, users should be educated about the signs of phishing and credential theft, such as unexpected or suspicious login requests, and should always verify the legitimacy of websites before entering any sensitive information.