olaycasino390[.]com

Analysis of the domain olaycasino390.com shows it was registered on 21 May 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The authoritative nameservers are coen.ns.cloudflare.com and gail.ns.cloudflare.com, indicating the site is hosted behind Cloudflare’s network. DNS resolution returns the IP address 104.21.42.243, which is owned by Cloudflare. The domain is currently flagged by multiple security services: VirusTotal reports five of ninety‑one scanners label the domain as malicious, and PhishDestroy has added it to its blocklist. Additionally, it appears on one other security blocklist.

The threat classification in the supplied intelligence is “generic phishing” with an elevated risk rating and an active status. No public evidence of the site’s content, SSL certificate details, HTTP response codes, or page title has been released, so the exact phishing vector and targeted brand remain unknown. The lack of visible page metadata limits attribution but the combination of recent registration, Cloudflare hosting, and multiple vendor detections strongly suggests a purpose‑built phishing infrastructure. Defenders should immediately block DNS resolution for olaycasino390.com and any traffic to 104.21.42.243 at the network perimeter.

The domain should be added to URL filtering and email security policies. Continuous monitoring of the IP address and associated Cloudflare edge nodes is advised, as the attacker may shift to alternative IPs within the same provider. Security teams should also ingest the indicator into threat‑intel platforms to correlate with any future activity targeting users. Given the elevated risk rating, organizations handling sensitive credentials should treat any communication referencing the domain as malicious.