rivetpin[.]casa

Analysis of the domain rivetpin.casa, registered on July 29 2026 through Global Domain Group LLC, shows that the authoritative name servers are kami.ns.cloudflare.com and lars.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. DNS resolution returns the address 104.21.51.200, which belongs to Cloudflare’s public edge network; no further hosting details are disclosed by the resolver. The domain appears on a single public phishing blocklist, where it is listed by PhishDestroy as an active malicious indicator. No additional blocklists currently flag the domain.

A recent VirusTotal scan performed by 91 anti‑malware engines reported no detections at the time of analysis. The absence of a detection does not constitute evidence of benign behavior, nor does it guarantee that the payload is clean; it only reflects the current state of the scanners used. No SSL/TLS certificate information, HTTP response codes, or page title data are available in the supplied evidence, so the surface‑web characteristics of the site remain unverified.

Given the recent creation date, the use of Cloudflare infrastructure, and inclusion on a phishing‑specific blocklist, the domain should be treated as a high‑confidence phishing indicator until further forensic data is obtained. Defensive actions recommended for security teams include adding rivetpin.casa to outbound filtering rules, blocking the resolved IP 104.21.51.200 at the network perimeter, and monitoring DNS queries for the domain or its name‑server pair. Analysts should also request a live web fetch to capture HTTP headers, certificate details, and page content, which will enable correlation with known phishing kits or brand impersonation patterns.