This domain, highspin-casino.pro, was registered on July 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is currently flagged as an active phishing threat targeting online casino users. Infrastructure analysis reveals the domain is hosted on Cloudflare nameservers (damian.ns.cloudflare.com and rita.ns.cloudflare.com) and resolves to the IP address 104.21.95.110, a common Cloudflare proxy endpoint. The SSL certificate is issued by Google Trust Services (WE1), which, while legitimate in origin, is frequently leveraged by phishing domains to appear trustworthy. As of July 28, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy, indicating confirmed malicious activity.
VirusTotal reports that 4 out of 91 security vendors have detected the domain as malicious, providing further evidence of its fraudulent nature. The domain's registration recency (within four days of this report) aligns with typical phishing campaign timelines, where attackers rapidly deploy and rotate domains to evade detection. The use of Cloudflare infrastructure is notable, as it obscures the true hosting origin and complicates takedown efforts. While the specific brand or casino being impersonated is not explicitly detailed in available data, the domain name suggests an attempt to mimic a legitimate online gambling platform.
Defenders should treat this domain as high-risk and prioritize blocking it at the DNS, proxy, and endpoint levels. Network security teams are advised to monitor for connections to 104.21.95.110 and the associated Cloudflare nameservers, as these may indicate compromised systems or ongoing phishing attempts. Further analysis of the site's content, if accessible, could provide additional indicators of compromise, such as phishing kits or credential-harvesting scripts, but such details are not currently available in the provided intelligence.