Analysis of kingmaker-casino.info indicates a high-risk phishing domain targeting online gambling users. The domain was registered on July 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, with a Gridinsoft trust score of 0/100, reflecting no established reputation. Infrastructure analysis reveals Cloudflare nameservers (jerry.ns.cloudflare.com, norah.ns.cloudflare.com) and resolution to IP address 188.114.97.3. VirusTotal detections show 4 of 91 security vendors flagging the domain, while PhishDestroy has explicitly blocked it.
The domain appears on one security blocklist, confirming active malicious classification. No brand-specific targeting or phishing kit details are currently available, though the domain name suggests a casino-themed lure. The site remains active as of July 31, 2026, with no observed takedown or sinkholing.
Defenders should treat this domain as confirmed malicious infrastructure and implement blocking at DNS, proxy, or firewall layers. Additional monitoring of associated IP 188.114.97.3 may reveal related phishing domains leveraging the same hosting provider. Due to the recent registration and Cloudflare usage, WHOIS-based attribution remains limited, and content analysis is pending further investigation.