kralbet[.]tr-yenigiris[.]vip

The domain kralbet.tr-yenigiris.vip is currently active and poses a significant threat due to its early detection status. Despite having zero detections on VirusTotal, the domain is already listed on one public blocklist, specifically by PhishDestroy. This indicates that the domain is exploiting the critical 24-72 hour gap between registration and antivirus database propagation, a window where many phishing domains operate undetected.

Registered with Dynadot Inc and hosted on IP address 185.66.142.98 in the Netherlands, the domain uses Let's Encrypt for SSL certification. The page title, "Kralbet: Büyük Kazanç Fırsatları - Kralbet Eğlencesi," suggests an imitation of a gambling or entertainment brand, potentially luring victims with promises of large winnings. The domain's cloaking score is low, at 1 out of 10, indicating that it serves benign content to scanners while potentially delivering malicious content to unsuspecting users.

The abuse score of 35 out of 100 further underscores the potential risk associated with this domain. The hosting organization, KnownSRV Ltd., under ASN AS200514, is known for hosting similar threat vectors. PhishDestroy's early detection of this domain on the same day it was created highlights the importance of proactive threat intelligence in identifying and mitigating risks before they propagate through antivirus feeds. As this domain continues to operate, it underscores the need for continuous monitoring and rapid response to emerging threats.