pescaracalcio[.]com

Analysis indicates that the domain pescaracalcio.com is currently active and has been classified as a generic phishing site. The authoritative name server set consists of dns.technorail.com, dns2.technorail.com, dns3.arubadns.net and dns4.arubadn (truncated). The domain resolves to a web server that returns an HTTP 301 redirect, which is a common technique used to forward victims to a malicious landing page or to obscure the final payload location. Registration data shows the domain was purchased through Tucows Domains Inc., a registrar frequently used by threat actors due to its low‑cost, high‑volume onboarding.

The domain is listed on at least one public blocklist and has been flagged by the PhishDestroy sinkhole, confirming that defensive feeds already recognize it as malicious. VirusTotal analysis reports that 2 of 91 scanned security vendors identified the domain as suspicious, providing additional independent confirmation of its risk profile. No public information about the page title, SSL certificate, hosting IP address, or geographic location is available in the current dataset, leaving those infrastructure attributes unverified.

Defenders should immediately add pescaracalcio.com to network and email filtering rules, ensure that any URL‑based security controls reference the known blocklist entries, and monitor for any new DNS resolutions or certificate deployments related to the domain. Continuous re‑evaluation is advised, as threat actors may modify the redirect target or host new payloads behind the same domain. The limited detection footprint—two vendor flags and a single blocklist entry—suggests that broader security products may not yet have incorporated the indicator, reinforcing the need for proactive blocking based on the known intelligence.