holiganbet7115[.]icu

Analysis of holiganbet7115.icu shows a newly registered domain created on July 20, 2026 and currently resolved to the IP address 188.114.97.3. The domain is hosted on Cloudflare infrastructure, as indicated by the authoritative name servers chris.ns.cloudflare.com and gail.ns.cloudflare.com. The TLS certificate presented by the site is issued by Google Trust Services under the WE1 designation, which provides a valid HTTPS connection but does not attest to the legitimacy of the content. Registration records list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar, a known provider often leveraged by malicious operators for rapid turn‑over registrations.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy platform, confirming that it is already recognized by at least one anti‑phishing service. VirusTotal reports indicate that the site has been examined by 91 scanning engines, none of which have raised a detection; however, the absence of detections is not evidence of safety and may reflect a lack of payload or limited visibility at the time of scanning. The current status is listed as active, suggesting that the site is reachable and may be delivering phishing content. Uncertainties remain regarding the exact phishing payload, targeted brand, and whether the site hosts credential‑harvesting forms, as no page title or content analysis is available.

Defenders should proactively add holiganbet7115.icu and its associated IP 188.114.97.3 to outbound and inbound block lists, enforce DNS‑based filtering, and monitor for any new detections on reputation services. Continuous re‑scanning of the domain with sandbox and heuristic engines is advised to capture any evolving malicious payloads. Organizations employing email security gateways should scrutinize inbound messages that reference this domain and treat any links to it as malicious until a definitive content analysis can be performed.