imajbetonlinegiris[.]icu

The domain imajbetonlinegiris.icu was registered on July 28, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IP address 104.21.43.198. Both indie.ns.cloudflare.com and matt.ns.cloudflare.com are listed as its authoritative nameservers, indicating that the domain is hosted behind Cloudflare’s CDN infrastructure. The domain appears on a single security blocklist and has been flagged by the PhishDestroy blocklist, which is consistent with the generic phishing classification assigned to the indicator.

A VirusTotal scan was performed by 91 antivirus and URL‑reputation vendors; none of the vendors returned a detection, but the lack of a detection does not constitute evidence of benign behavior, especially given the blocklist entries and the recent creation date. The domain remains active as of the report date, August 01, 2026, and no additional intelligence such as SSL certificate details, HTTP response codes, page titles, or brand references has been disclosed. Consequently, the primary observable attributes are the registrar information, the Cloudflare‑based hosting, the blocklist presence, and the VT scan result.

Uncertainty remains around the actual payload delivered by the site, any credential‑harvesting mechanisms, and the geographic origin of the operators. Defensive teams should consider adding imajbetonlinegiris.icu to URL filtering policies, enforce DNS blocklisting, and monitor outbound connections to the associated Cloudflare IP range. Continuous re‑scanning with updated VT signatures and periodic checks against emerging blocklists are recommended to capture any future changes in the domain’s threat profile.