holiganbet8000[.]icu

Analysis of holiganbet8000.icu shows a domain registered on July 17, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 104.21.71.241 and is served by Cloudflare nameservers chris.ns.cloudflare.com and gail.ns.cloudflare.com. VirusTotal records indicate the domain has been examined by 95 scanning vendors, with none reporting a detection at the time of review; this absence of detections does not constitute evidence of safety. The domain appears on a single public blocklist, PhishDestroy, which has actively flagged it as malicious. No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing status, or page title has been disclosed, leaving the content and exact phishing vector unverified. Given the recent creation date, use of a reputable CDN, and inclusion on a phishing‑specific blocklist, the infrastructure aligns with typical short‑lived phishing campaigns. Defenders should consider adding holiganbet8000.icu to network and endpoint blocklists, monitoring traffic to the associated IP 104.21.71.241, and employing DNS‑level filtering to prevent resolution. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as payload characteristics or victim targeting patterns.