xultrabetguncelgiris[.]icu

Analysis indicates that the domain xultrabetguncelgiris.icu was registered on July 11 2026 and remains active as of July 14 2026. The site returns HTTP status 200 and presents the page title "Scream Boss | Geliştirme Aşamasında - Çok Yakında". DNS resolution is handled by rocco.ns.cloudflare.com and sureena.ns.cloudflare.com, both Cloudflare nameservers, and resolves to IP 188.114.96.3, which belongs to Cloudflare's edge network. Registration information lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. A VirusTotal scan shows that 2 of 91 security vendors flagged the domain, providing independent confirmation of malicious intent. These data points—recent creation, active status, Cloudflare‑hosted infrastructure, and vendor detections—support the high‑risk generic phishing classification. The specific phishing content, targeted brand, or credential‑harvesting mechanism has not been disclosed, and no additional payload or C2 infrastructure is currently observable. Defenders should block DNS resolution for xultrabetguncelgiris.icu at perimeter filters, add the domain to URL allow‑list exclusions, and monitor for outbound traffic to 188.114.96.3. Any credential submissions to this site should be treated as compromised, prompting immediate user password resets and user education on phishing avoidance. Continuous monitoring of threat‑intel feeds is recommended to capture any emerging indicators related to this domain.