betkom-erisim[.]icu

The domain betkom-erisim.icu is currently active and classified as a high-risk generic phishing threat. Analysis indicates it impersonates Zirvebet, a known online betting platform, by presenting a fraudulent login page titled 'Zirvebet Platformu Girişi - Zirvebet 2026 Adresi - Zirvebet Güncel.' This domain is designed to deceive users into entering sensitive credentials, including usernames, passwords, and potentially financial information, under the guise of legitimate platform access. Infrastructure analysis reveals the domain was registered on June 23, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.97.3, which has been linked to other phishing campaigns in recent months. Detection metrics from VirusTotal indicate that 2 of 95 security vendors have flagged this domain as malicious, suggesting early-stage detection or evasion techniques. No additional blocklist entries or trust scores were identified at the time of analysis, though the domain remains operational and unmitigated. Current status confirms betkom-erisim.icu is still active and poses a significant risk to users. Organizations and individuals are advised to block this domain at the network level and implement real-time monitoring for related indicators of compromise. Users who may have interacted with the domain should immediately reset credentials for any associated accounts and enable multi-factor authentication where available. Security teams are encouraged to correlate this domain with other phishing infrastructure, particularly those targeting the online gambling sector, to identify broader campaign patterns.