kinqrayol[.]icu

This domain, kinqrayol.icu, is actively impersonating Zirvebet, a known online betting platform, to harvest user credentials. The phishing page displays the title 'Zirvebet Platformu Girişi - Zirvebet 2026 Adresi - Zirvebet Güncel,' mimicking legitimate login portals to deceive users into entering sensitive account information. Analysis indicates the site is designed to capture usernames, passwords, and potentially financial details under the guise of a trusted brand, posing a direct risk of account takeover and financial fraud for visitors. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on June 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious registrations. VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The site resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the content. The Gridinsoft trust score of 0/100 further corroborates the domain's malicious intent. Users who have visited kinqrayol.icu or entered credentials on the site should immediately take corrective actions. Change passwords for any accounts accessed from the phishing page, particularly those associated with Zirvebet or financial services. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or login attempts. If financial information was submitted, contact the relevant institution to report potential fraud and consider placing a fraud alert on credit files. Clear browser caches and scan devices for malware to ensure no persistent threats remain.