galaterrace[.]com

The domain galaterrace.com is currently active and was registered on April 26, 2022 through NICS Telekomunikasyon A.S. It resolves to the IPv4 address 104.247.162.67, which is assigned to AS42846 GNET Internet Telekomunikasyon A.S. in Turkey. The authoritative name servers are ns1.guzelhosting.com, ns11.guzelhosting.com, ns12.guzelhosting.com, and ns2.guzelhostin, indicating hosting on the guzelhosting platform. The site presents a page title of "Gala Terrace Düğün & Davet Salonu - Gala Terrace," suggesting a wedding venue, yet the domain is classified as an impersonation of the brand celer. The SSL certificate is issued by Let’s Encrypt (R10), providing HTTPS encryption but offering no validation of the site’s legitimacy. Reputation metrics are poor, with a Gridinsoft trust score of 0 out of 100, and the domain appears on two public blocklists and has been flagged by PhishDestroy and CryptoFirewall. AlienVault OTX lists the domain in six threat intelligence pulses, reinforcing its malicious reputation. An HTTP 301 redirect is observed, but the final landing content has not been publicly analyzed, leaving the exact phishing payload or credential‑harvesting mechanisms unknown. Given the high‑risk classification, defenders should block the domain and its hosting IP at perimeter defenses, monitor DNS queries for the associated name servers, and add the domain to internal threat intel feeds. Continuous observation of any changes to the site’s content or additional detections is recommended to refine response actions.