tr[.]masterbetting-dogrudangiris[.]icu

Analysis of tr.masterbetting-dogrudangiris.icu indicates a high‑risk generic phishing campaign that remains active as of the report date, July 19, 2026. The domain was registered through Dynadot Inc on July 18, 2026 and resolves to the IPv4 address 31.56.209.207. Authoritative name servers are ns1.dyna-ns.net and ns2.dyna-ns.net. The site presents the Cloudflare challenge page titled "Attention Required! | Cloudflare," suggesting the use of Cloudflare’s protection service, but no further page content has been disclosed. Infrastructure signals place the domain on a single security blocklist and it has been flagged by PhishDestroy. VirusTotal scans show that 2 of 95 security vendors have reported detections, providing limited but corroborating evidence of malicious activity. While the limited detection count suggests that the payload or hosting may be newly deployed, the combination of recent registration, active status, and inclusion on a blocklist warrants immediate defensive action. Defenders should block the domain and its resolved IP at network perimeters, add the name servers to watch lists, and monitor for any traffic matching the domain or IP. Continuous re‑evaluation is advised, as additional detections or threat intelligence could emerge.