matadorbetgunceli[.]icu

The domain matadorbetgunceli.icu has been identified as a generic phishing threat and is currently offline. The domain was specifically designed to deceive users, likely impersonating legitimate entities to harvest sensitive information. Its last known resolution to IP address 188.114.96.3 and its registration through FewMoreTaps OÜ suggest a structured approach to concealing its malicious intent.

Technical analysis reveals that matadorbetgunceli.icu was flagged by 8 out of 95 security vendors on VirusTotal. Additionally, it has been included in eight threat intelligence pulses on AlienVault OTX, indicating a broad recognition of its malicious activities. The domain was registered on April 28, 2026, with a trust score of 0/100 from Gridinsoft, further underscoring its lack of legitimacy. While the domain has been blocked by at least one security blocklist, it is crucial to note its use of a Let's Encrypt SSL certificate, which may have been employed to lend false credibility to its phishing activities.

Currently, matadorbetgunceli.icu is offline, reducing immediate risk. However, the presence of this domain on multiple threat intelligence platforms suggests a persistent threat actor behind its operations. Organizations are advised to update their blocklists to include this domain, ensuring that any residual threat vectors are neutralized. Additionally, implementing advanced email filtering and encouraging users to verify the authenticity of communications can mitigate potential phishing risks. Continuous monitoring for similar domain patterns or IP addresses is recommended to preemptively address emerging threats.