m[.]avrupabetsfinal[.]icu

Analysis indicates that the domain m.avrupabetsfinal.icu was registered on July 16, 2026 through Dynadot Inc and is currently active. The domain resolves to the IPv4 address 188.114.97.3 and uses Cloudflare authoritative name servers harleigh.ns.cloudflare.com and tony.ns.cloudflare.com. A VirusTotal scan has returned a single positive detection out of 91 security vendors, suggesting at least one engine identified malicious characteristics. The combination of a newly created domain, use of a reputable registrar, and reliance on Cloudflare DNS is a pattern commonly observed in generic phishing campaigns that leverage fast‑deployment infrastructure. No additional intelligence on the hosted content or targeted brand has been disclosed, so the exact phishing lure remains unknown. Defenders should consider adding the domain to block lists, enforce outbound DNS filtering for the .icu TLD, and monitor for any traffic or email indicators referencing the domain. Continuous re‑scanning of the host and periodic WHOIS checks are recommended to detect any evolution of the threat.