tr[.]galabet-haziran[.]icu

The domain tr.galabet-haziran.icu is flagged as a phishing site impersonating the legitimate Galabet website. This domain poses a significant risk to users who may be tricked into providing sensitive information such as login credentials, personal data, or financial details. The threat is elevated due to the domain's use of a legitimate SSL certificate from Google Trust Services, which can create a false sense of security.

Infrastructure analysis reveals that the domain was registered through Dynadot LLC on May 31, 2026. The domain resolves to the IP address 104.21.25.159 and is currently offline. According to VirusTotal, 18 out of 95 security vendors have flagged this domain as malicious. The domain appears on 2 security blocklists, further indicating its involvement in phishing activities. Technologies detected on the domain include Cloudflare Browser Insights, Cloudflare, and HTTP/3, suggesting the use of sophisticated infrastructure to enhance the credibility and reach of the phishing site.

If users have visited this domain, they should immediately check their accounts for any unauthorized activity and change their passwords. It is also recommended to monitor financial statements and credit reports for signs of fraud. Users should report any suspicious activity to their respective service providers and avoid clicking on links or providing information to unknown or unverified websites in the future.