holiganbet8001[.]icu

Analysis of holiganbet8001.icu indicates a recently registered domain exhibiting characteristics consistent with phishing infrastructure targeting online betting platforms. The domain was created on July 15, 2026, and remains active as of July 20, 2026. Infrastructure analysis reveals Cloudflare nameservers (chris.ns.cloudflare.com, gail.ns.cloudflare.com) and resolution to IP address 104.21.89.126, an endpoint with no prior associations to confirmed legitimate services in available threat intelligence. The domain appears on one security blocklist, specifically PhishDestroy, which categorizes it as malicious. No detections were recorded by the 91 vendors scanning the domain on VirusTotal at the time of assessment, though the absence of detections does not confirm safety and may reflect delayed or incomplete coverage. The registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED, a provider frequently observed in the registration of high-risk domains. No SSL certificate details, HTTP response codes, or page titles are currently available for analysis, limiting assessment of the site's exact content or intended brand impersonation. The domain's name, holiganbet8001.icu, suggests a focus on gambling or betting, but no confirmed brand targets or phishing kits have been identified in the available data. Defenders are advised to treat this domain as untrusted and implement blocking at the DNS or network level based on the single confirmed blocklist entry. Further monitoring is recommended to track additional detections or changes in infrastructure, as the domain's recent registration and use of Cloudflare may indicate an attempt to evade detection or takedown efforts.