avrupabetresmigiris[.]vip

avrupabetresmigiris.vip is flagged as a high‑risk crypto‑gambling phishing site. The domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and resolves to the Cloudflare‑owned address 104.21.82.50, belonging to AS13335 in the United States. Cloudflare’s DNS configuration is evident from the authoritative name servers lennon.ns.cloudflare.com and anna.ns.cloudflare.com, and the site is served over HTTP/3. The TLS certificate is issued by Google Trust Services under the WE1 intermediate, indicating a valid‑looking HTTPS deployment despite the underlying malicious intent. An HTTP 525 response (SSL handshake failed) is observed, which may be caused by mismatched TLS parameters or intentional disruption to evade detection.

The page title returned by the server reads “Betasus Giriş - Betasus Güncel Erişim - Betasus Resmi Link”, reinforcing the claim that the site pretends to provide access to the Betasus gambling platform. VirusTotal analysis shows that 2 of 93 security vendors have flagged the domain, and the domain appears on one external blocklist. PhishDestroy has already added the domain to its blocklist, providing additional confidence in the malicious classification. Evidence indicates that the infrastructure is entirely hosted on Cloudflare, a common choice for threat actors seeking rapid deployment and built‑in DDoS protection. The combination of a brand‑targeted title, a recent registration date, and the use of a reputable SSL certificate suggests a credential‑harvesting or payment‑information collection campaign aimed at users of the Betasus service.

No public Safe Browsing or OTX entries are referenced in the supplied data, so the broader detection landscape remains unclear. Defenders should block connections to 104.21.82.50 and add avrupabetresmigiris.vip to URL filtering policies. Monitoring for DNS queries to the Cloudflare name servers associated with this domain can provide early warning of infection attempts.