cat-casino-registraciya777t[.]info

Analysis of the domain cat-casino-registraciya777t.info indicates an active high-risk phishing campaign targeting online gambling users, specifically those searching for the 'Cat casino' brand. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with fraudulent infrastructure. Infrastructure analysis reveals Cloudflare nameservers (osmar.ns.cloudflare.com, anastasia.ns.cloudflare.com) and resolution to the IP address 92.63.227.92, hosted on AS13335 (Cloudflare, Inc.) in the United States. The page title, 'Cat casino официальный сайт и вход играть онлайн,' explicitly references the Cat casino brand, suggesting an intent to deceive users seeking legitimate gambling platforms. The domain is classified under the 'Gambler Scam' phishing kit, a pattern consistent with crypto-gambling fraud. Detection data shows limited but confirmed malicious activity: two security vendors flagged the domain on VirusTotal, and it appears on one security blocklist. The domain remains active as of July 13, 2026, returning an HTTP 301 redirect, which may indicate an attempt to evade detection or redirect victims to secondary malicious infrastructure. Technical indicators include the use of WordPress, MySQL, PHP, Yandex.Metrika analytics, and HSTS enforcement, a combination often observed in credential-harvesting or fraudulent gambling sites. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the domain's malicious intent. Defenders should treat this domain as part of an ongoing crypto-gambling phishing operation and prioritize blocking or monitoring traffic to 92.63.227.92 and associated Cloudflare-resolved endpoints. Further analysis of the phishing kit's payload and backend infrastructure is recommended to identify additional compromised assets or related campaigns.