ikimisli-girisim[.]vip

Analysis of the domain ikimisli-girisim.vip indicates it is an active phishing site targeting users of a crypto gambling platform. The domain was registered on February 22, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which is part of Cloudflare's network (AS13335) and geolocated in the United States. The site is protected by Cloudflare infrastructure, including HTTP/3 support and nameservers diana.ns.cloudflare.com and colin.ns.cloudflare.com, which may complicate takedown efforts and obscure the true hosting origin.

The page title, 'Betasus Giriş - Betasus Güncel Erişim - Betasus Resmi Link,' explicitly references the Betasus brand, suggesting the site is designed to deceive users seeking official Betasus gambling login pages. The HTTP status code 525 (SSL handshake failed) may indicate misconfigured server settings or an attempt to evade automated security scans. The domain's SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the malicious intent of the site. As of the report date, ikimisli-girisim.vip appears on one security blocklist and is flagged by 3 of 95 security vendors on VirusTotal, confirming its detection as a phishing threat.

The domain remains active and is classified under the 'Crypto Gambling' scam type, aligning with the page title's branding. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in regions where Betasus or similar gambling platforms are popular. Further monitoring is recommended to track any shifts in infrastructure or additional detection by security vendors. The use of Cloudflare nameservers and a recently registered domain underscores the need for continued vigilance against this threat.