de-sierracasino[.]com

As of July 20, 2026, the domain de-sierracasino.com is identified as a high-risk phishing domain. This domain was registered through Fewmoretaps OU d/b/a Trustname.com on July 15, 2026, and is currently active. The domain resolves to the IP address 188.114.97.3 and is hosted on Cloudflare's nameservers, kyrie.ns.cloudflare.com and lilith.ns.cloudflare.com. While the exact content of the site has not been analyzed, the domain is flagged by one security blocklist and is blocked by PhishDestroy. Analysis indicates that only one out of 95 security vendors on VirusTotal has flagged this domain, which suggests a low level of detection. However, given the domain's recent creation and active status, it is advisable for defenders to treat it with caution. Defenders should monitor network traffic for connections to this IP and domain, and consider implementing additional security measures such as DNS filtering or web application firewalls to prevent access. Regular updates to security blocklists and threat intelligence feeds are also recommended to stay ahead of any potential threats. The registrant's use of a privacy-protected registrar and the domain's association with Cloudflare's infrastructure may indicate an attempt to obfuscate the origin and maintain operational resilience. Further investigation and analysis of the domain's content are encouraged to determine the specific nature of the phishing campaign and to enhance defensive strategies.