# PhishDestroy threat dossier — betcliccasinoitalia.com ================================================================ Fetched: 2026-07-30 08:00:26 UTC Canonical: https://phishdestroy.io/domain/betcliccasinoitalia.com/ ## VERDICT ---------------------------------------------------------------- CRITICAL THREAT — DO NOT VISIT Composite threat score: 96/100 (PhishDestroy scoring — see methodology below) ## DETECTION EVIDENCE ---------------------------------------------------------------- VirusTotal: 7/91 security vendors flagged this domain Flagging vendors: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, PhishFort, SOCRadar Public blocklists: listed on 1 independent blocklist ## INFRASTRUCTURE ---------------------------------------------------------------- IP address: 172.86.188.178 (CA, Toronto) ASN: AS32489 Amanah Tech Inc. Hosting org: Amanah Tech Inc Registrar: NAMECHEAP INC Nameservers: dns1.registrar-servers.com, dns2.registrar-servers.com Registered: 2025-12-16 Expires: 2026-12-16 Page title: BetClic Casino Italia 🎰 Bonus Benvenuto 100% fino a €1.000 + 250 Giri HTTP response: 200 ## TLS CERTIFICATE ---------------------------------------------------------------- Issuer: Let's Encrypt / YE2 Expires: 2026-10-11 Status: INVALID chain Fingerprint: cf9e21de01786b3ef7c688a91d01db7f0b68e98e9433de010c28fd8c5a46fa4e ## ABUSE-REPORT HISTORY (evidence of registrar non-response) ---------------------------------------------------------------- Status: pending notification queue. No abuse reports filed yet — this domain is waiting for the next cycle of our automated abuse-reporter. ## TIMELINE ---------------------------------------------------------------- Domain registered: 2025-12-16 (per WHOIS / CT — may reflect a renewal or transfer date, not first-ever registration) First detected: 2026-07-27 05:18:52 UTC (by PhishDestroy tracker) First reported: 2026-07-27 04:02:58 UTC (abuse notice filed) Last verified: 2026-07-30 07:57:54 UTC Current status: ACTIVE / observable ## EXTERNAL CORROBORATION (third-party evidence) ---------------------------------------------------------------- URLScan.io: https://urlscan.io/result/019fa1cb-1853-7074-8f1d-2f57dd8a4373/ URLQuery: https://urlquery.net/report/2437ed03-c4a6-4445-9464-4f1d29e6ddfb Wayback Machine: https://web.archive.org/web/*/betcliccasinoitalia.com crt.sh CT logs: https://crt.sh/?q=%25.betcliccasinoitalia.com Google transparency: https://transparencyreport.google.com/safe-browsing/search?url=betcliccasinoitalia.com AlienVault OTX: https://otx.alienvault.com/indicator/domain/betcliccasinoitalia.com URLhaus: https://urlhaus.abuse.ch/host/betcliccasinoitalia.com/ ## ANALYST NARRATIVE ---------------------------------------------------------------- [Generated: 2026-07-27 05:19:59 UTC — narrative may predate facts above. Treat fields in TIMELINE / DETECTION EVIDENCE / INFRASTRUCTURE as authoritative if they differ from the prose below.] betcliccasinoitalia.com Phishing Site Detected This domain, betcliccasinoitalia.com, was registered on December 16, 2025 through Namecheap Inc. The authoritative nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution points to the IPv4 address 172.86.188.178, which is currently the sole host observed for this domain. The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that threat‑intelligence sources have classified it as malicious. A VirusTotal scan was performed by 91 antivirus and URL‑reputation engines; at the time of analysis none of the engines returned a positive detection. While the lack of detections may suggest the payload has not yet been identified by those scanners, it does not guarantee the site is safe, especially given its classification by external blocklists. No additional infrastructure details such as ASN, hosting provider, or geographic location are disclosed in the available data. Likewise, there is no public information on SSL/TLS configuration, HTTP response codes, page title, or any observed content; those elements remain unverified. The current risk assessment remains “under investigation” and the domain is listed as active. Defenders should add betcliccasinoitalia.com to outbound filtering rules, monitor DNS queries for the associated IP address, and ensure that any email or web traffic that resolves to this host is blocked or sandboxed. Continuous re‑evaluation is advised as further indicators—such as malicious payloads, credential‑stealing pages, or additional blocklist entries—may emerge. ## EVIDENCE HASHES ---------------------------------------------------------------- PhishDestroy Case ID: PD-20260727-A27BA1 Favicon MD5: 01f3d59f7e93df37e6362bab5e392f9f TLS cert SHA-256: cf9e21de01786b3ef7c688a91d01db7f0b68e98e9433de010c28fd8c5a46fa4e ## SCORING METHODOLOGY ---------------------------------------------------------------- Composite score is NOT derived from VirusTotal alone. PhishDestroy aggregates: - VirusTotal positive ratio - Public blocklist consensus (MetaMask, ScamSniffer, OpenPhish, PhishTank, URLhaus, CryptoFirewall, SEAL, Polkadot, Enkrypt, Phishunt, DiscordPhishing, PhishingDB) - Cloaking detection (HTTP 666 or rendering delta between bot and real visitor) - DNS-filter consensus (Quad9, CleanBrowsing, NextDNS, AdGuard, Cloudflare, etc.) - AlienVault OTX pulses + Cloudflare Radar + Google Safe Browsing - URLScan / URLQuery verdicts - Brand-impersonation heuristics (DOM analysis of forms, logos, wording) - Known phishing-kit fingerprinting (favicon hash, JS obfuscation signatures) - Wallet-drainer family classification (Angel, MS, Rainbow, Pink, Inferno, ...) - Free-TLS vs paid-cert ratio (throwaway infrastructure signal) - Registrar/hosting abuse history (this registrar's track record) - Human researcher sign-off (operator takedown team) A domain present in our database is ALREADY flagged. A low VT count by itself does NOT mean the domain is safe — new scam domains routinely show 0/95 VT for their first 7–30 days while actively draining wallets. Always cross-reference the composite score and the individual indicators above, not just VT. ## CORRECTIONS / APPEALS ---------------------------------------------------------------- Full HTML report: https://phishdestroy.io/domain/betcliccasinoitalia.com/ JSON API: https://api.destroy.tools/v1/check?domain=betcliccasinoitalia.com Appeal a flag: https://phishdestroy.io/appeals/ (responded to within 48 hours, FP rate <0.01%) Submit a report: https://t.me/PhishDestroy_bot About PhishDestroy: independent open-source threat-intelligence platform. Tracked: 195,590 domains (93,415 alive under monitoring, 99,913 confirmed takedowns/dead). Site: https://phishdestroy.io