pinup[.]co[.]com

The domain pinup.co.com is currently active and classified as a high‑risk brand‑impersonation operation targeting Google. Infra‑structure analysis shows the domain resolves to 104.21.8.113, an IP owned by AS13335 Cloudflare, Inc., located in the United States. The site serves over HTTPS using a certificate issued by Google Trust Services / WE1, a credential often abused to lend false legitimacy. HTTP responses return a 301 redirect, and the underlying stack consists of WordPress, MySQL, PHP, jQuery, Cloudflare services, and HTTP/3 support.

Registration data indicates the domain was created on 16 August 1997 through Moniker Online Services LLC and uses four nic.co.com nameservers (ns1‑ns4.nic.co.com). Blocklist monitoring shows the domain appears on four security blocklists and has been blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. A Gridinsoft trust score of 0 / 100 underscores its malicious nature. VirusTotal scans report two of ninety‑one security vendors flagging the domain, reinforcing the suspicion despite the low detection count.

The visible page title, “Pin Up Casino Canada – Up to C$10,000 Bonus, Fast Payouts,” suggests the site is presenting gambling‑related content while simultaneously masquerading as a Google support portal, consistent with the listed tech‑support scam classification and the Gambler Scam phishing kit. Analysts should treat the domain as malicious, enforce DNS‑level blocking of both the domain and its hosting IP, and incorporate it into intrusion‑prevention and email‑filtering rules. Continuous monitoring of the associated IP ranges and rapid updates to threat‑intel feeds are advised to mitigate potential credential‑harvesting or malware distribution attempts originating from this infrastructure.