atakoyvakf[.]com

The domain atakoyvakf.com was registered on July 23, 2025 through NameSilo, LLC and is currently active. DNS resolution points to IP address 107.173.193.235, which belongs to AS36352 (HostPapa) in the United States. Authoritative nameservers are ns1.bthostcloud.com and ns2.bthostcloud.com. An MX record with priority 0 is present, directing mail to _dc-mx.455c183c410f.atakoyvakf.com. The web server returns HTTP 200 and employs a Let's Encrypt/E7 TLS certificate, supporting HTTP/3 via Cloudflare. Front‑end assets include Bootstrap, jQuery, OWL Carousel, and Cloudflare‑provided services. The page title reads “ATAKÖY FOUNDATION TÜRKİYE - Humanitarian Aid & Community Development Organization,” indicating an attempt to mimic a legitimate charitable organization. The site is classified as a cryptocurrency‑type brand‑impersonation scam and has been blocked by PhishDestroy, appearing on one security blocklist. Gridinsoft assigns a trust score of 0/100, and two of ninety‑five VirusTotal scanners flag the domain. Evidence suggests the operator is leveraging reputable hosting and CDN services to lend credibility while delivering malicious content. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms employed, as no detailed page analysis is available. Defenders should add atakoyvakf.com and its resolved IP 107.173.193.235 to blocklists, monitor DNS queries for the associated nameservers and MX host, and enforce email filtering rules to reject messages originating from the domain. Continuous threat‑intel feeds should be consulted for any emerging indicators tied to the identified infrastructure.