# PhishDestroy domain threat record: etoto-pl.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/etoto-pl.com/
Machine-readable companion: https://phishdestroy.io/domain/etoto-pl.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 00:05:22 UTC
- Last availability or vendor check: 2026-10-26 00:05:22 UTC
- Stored record updated: 2026-10-26 07:21:32 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: dota 2

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Internet Domain Service BS Corp.
- Registrar country in stored WHOIS data: KZ
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2025-07-18 08:16:15 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17584-72da-72a9-b9cf-f7dd9db0753c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/etoto-pl.com
- Certificate Transparency search: https://crt.sh/?q=%25.etoto-pl.com
- Web Archive lookup: https://web.archive.org/web/*/https://etoto-pl.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed etoto-pl.com on 2026-10-26 after its intake flagged the domain for a high number of malicious detections on VirusTotal. The recorded page title reads “Etoto – legalny bukmacher z szybkimi wypłatami i esportem”, but the assessment remains a generic suspicion. An HTTP 200 response was observed on the same date, confirming the site was reachable at that time.

How the scam works
The detections suggest the domain may be used for phishing or other deceptive activities, a common pattern where attackers mimic legitimate services to harvest credentials or lure users. No specific credential‑stealing form, wallet request, or malware payload was observed on the page, so the exact mechanism cannot be confirmed. Visitors should treat any request for personal or financial information on such sites as potentially fraudulent.

Evidence
VirusTotal (analysis 2026-10-24) reported 14 malicious and 2 suspicious detections from 92 engines, with vendors such as BitDefender, Fortinet and G‑Data labeling it phishing. Google Safe Browsing checked on 2026-10-26 reported no flag. urlscan.io captured the site on 2026-10-26; its engine verdict scored 86 as malicious, though the overall verdict was non‑malicious. Cloudflare Radar (2026-10-26) categorized the domain as phishing and malware. OTX listed five pulses referencing the domain as of 2026-10-26. No external blocklists flagged it, while PhishDestroy’s internal list marked it true.

Infrastructure
The domain was registered with Internet Domain Service BS Corp on 2025-07-18 and expires on 2027-07-18. DNS records observed on 2026-10-26 listed Cloudflare IPs 188.114.96.3 and 188.114.97.3, and urlscan captured an additional address 172.67.202.10. TLS was issued by Google Trust Services, valid until 2026-12-20, and the certificate covers etoto-pl.com and its subdomains. The hosting network was identified as CloudFLARENET‑EU, recorded in Great Britain.

What to do
Do not submit login credentials, payment details or personal data to this site; if you have already done so, change affected passwords and monitor accounts for unauthorized activity. Organizations should block outbound connections to the listed IPs and add etoto-pl.com to their deny lists. Review web proxy and firewall logs for any recent accesses and consider applying stricter URL filtering for domains flagged as phishing.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17584-72da-72a9-b9cf-f7dd9db0753c/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1eeff8f7-32e2-4b43-adc9-bbad66784487
URLQuery report: https://urlquery.net/report/eb4ce494-e557-41a1-98af-56729e138dbc
Stored capture screenshot: https://i.ibb.co/r23xWNzT/8ce840be174e.png
Cloudflare Radar screenshot (2026-10-26T00:41:56Z): https://screenshots.phishdestroy.io/cf/1eeff8f7-32e2-4b43-adc9-bbad66784487.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/eb4ce494-e557-41a1-98af-56729e138dbc.png
URLScan screenshot (2026-10-26T00:07:20Z): https://screenshots.phishdestroy.io/us/01a17588-5f3c-74d9-8a35-cec82f73f9fa.png
URLScan capture report: https://urlscan.io/result/01a17588-5f3c-74d9-8a35-cec82f73f9fa/
VirusTotal report: https://www.virustotal.com/gui/domain/etoto-pl.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=etoto-pl.com
Archived copy: https://web.archive.org/web/20261026000705/https://etoto-pl.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 01:13:47 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/r23xWNzT/8ce840be174e.png
  Captured: 2026-10-26 00:05:22 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17584-72da-72a9-b9cf-f7dd9db0753c.png
  Captured: 2026-10-26 00:05:22 UTC
  Source report: https://urlscan.io/result/01a17584-72da-72a9-b9cf-f7dd9db0753c/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1eeff8f7-32e2-4b43-adc9-bbad66784487.png
  Captured: 2026-10-26 00:41:56 UTC
  Source report: https://radar.cloudflare.com/scan/1eeff8f7-32e2-4b43-adc9-bbad66784487
  SHA-256: 33ad1d49b5978e2536b201c269c60d2db525d1c9c1bc7f4b8ba20b46d36e027d
- URLQuery: https://screenshots.phishdestroy.io/uq/eb4ce494-e557-41a1-98af-56729e138dbc.png
  Source report: https://urlquery.net/report/eb4ce494-e557-41a1-98af-56729e138dbc
  SHA-256: d3078c031860ce71933c9eed9c1bbb8c62599658fa4e029137a2d36d61b16a9d
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17588-5f3c-74d9-8a35-cec82f73f9fa.png
  Captured: 2026-10-26 00:07:20 UTC
  Source report: https://urlscan.io/result/01a17588-5f3c-74d9-8a35-cec82f73f9fa/
  SHA-256: a66f7701248e0427ecee271119be92bd3aa3a3b0fa801301054409cfb62b1aa0

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T00:42:15Z",
        "uuid": "01a17584-72da-72a9-b9cf-f7dd9db0753c",
        "scanned_at": "2026-10-26T00:05:01Z",
        "final_url": "https://etoto-pl.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://etoto-pl.com/",
                "from": "http://etoto-pl.com/",
                "status": 307
            }
        ],
        "ip": "172.67.202.10",
        "domains": [
            "fonts.gstatic.com",
            "static.cloudflareinsights.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "192.178.155.94",
            "104.16.80.73",
            "64.233.180.95",
            "172.67.202.10"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "134c7c40638a27df8d4ef8ba8a34d2dc631256a574a66a592126c678fa6691f0",
        "script_hashes": [
            "9f88db0b2f19ad2e6dcbe523be43c3e548453c11cf0ab38d9872f674683cdf43"
        ],
        "globals": [
            "__cfBeacon"
        ],
        "tls": {
            "san": [
                "etoto-pl.com",
                "*.etoto-pl.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "etoto-pl.com",
            "protocol": "QUIC",
            "valid_to": "2026-12-20T01:44:03Z",
            "valid_from": "2026-09-21T00:45:14Z"
        },
        "domain_age_days": 1151,
        "apex_age_days": 1151,
        "tls_age_days": 34,
        "tls_valid_days": 90,
        "requests": 27,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 86,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T00:42:16Z",
        "uuid": "1eeff8f7-32e2-4b43-adc9-bbad66784487",
        "scanned_at": "2026-10-26T00:41:56Z",
        "final_url": "https://etoto-pl.com/",
        "status": 200,
        "history": [
            {
                "url": "https://etoto-pl.com/",
                "status": 200
            }
        ],
        "dom_hash": "bea9dc3e0547e701b34b2cbff76674ecf6948bef2509a845ac70a742cddd5588",
        "doc_hash": "134c7c40638a27df8d4ef8ba8a34d2dc631256a574a66a592126c678fa6691f0",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "etoto-pl.com",
                "type": "A",
                "value": "188.114.96.3"
            },
            {
                "name": "etoto-pl.com",
                "type": "A",
                "value": "188.114.97.3"
            },
            {
                "name": "etoto-pl.com",
                "type": "AAAA",
                "value": "2a06:98c1:3121::3"
            },
            {
                "name": "etoto-pl.com",
                "type": "AAAA",
                "value": "2a06:98c1:3120::3"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.96.3",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Internet Domain Service BS Corp",
            "created": "2025-07-18T10:16:15Z",
            "updated": "2026-06-10T05:37:48Z",
            "expires": "2027-07-18T10:16:15Z",
            "nameservers": [
                "casey.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T01:10:13Z",
        "analysis_at": "2026-10-24T00:03:47Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 14,
            "suspicious": 2,
            "undetected": 30
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "phishing",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "Internet Domain Service BS Corp",
        "created": "2025-07-18T10:16:15Z",
        "expires": "2027-07-18T10:16:15Z",
        "updated": "2026-06-10T05:37:48Z",
        "first_seen": "2024-03-05T02:32:36Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.22.22"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "casey.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "grannbo.ns.cloudflare.com"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=6z6-kw3E8Dyhr67H6d1Q2uknQeNlG1vXVHPP6fQpfnE"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:1616"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.202.10"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "casey.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:ca0a"
            }
        ],
        "dns_at": "2026-10-24T00:04:15Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "etoto-pl.com",
                "*.etoto-pl.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "1a7c96587093ed6f130ae55e55dcd932",
            "sha256": "d635d025d1393ae1ece238974a0d5735e37a2e9deefdd9db23bc9cf2ad215e8c",
            "subject": "etoto-pl.com",
            "valid_to": "2026-12-20T01:44:03Z",
            "valid_from": "2026-09-21T00:45:14Z"
        },
        "whois": {
            "registrar": "Internet Domain Service BS Corp",
            "registrar_iana_id": "2487",
            "registrar_url": "http://www.internet.bs",
            "created": "2025-07-18T10:16:15Z",
            "updated": "2026-06-10T05:37:48Z",
            "expires": "2027-07-18T10:16:15Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "casey.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-18T10:16:15Z",
                "last changed": "2026-06-10T05:37:48Z",
                "registration": "2025-07-18T10:16:15Z",
                "registrar expiration": "2027-07-18T10:16:15Z",
                "last update of RDAP database": "2026-10-24T00:04:00Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T00:13:15Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "etoto-pl.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-26T00:07:05Z",
            "first": "2024-09-05T08:33:17Z",
            "changes": 4,
            "days_archived": 7,
            "scans_per_day": 0.01,
            "avg_page_bytes": 7159
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://etoto-pl.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 7
        },
        "social_tags": {
            "title": "Etoto – legalny bukmacher z szybkimi wypłatami i esportem",
            "robots": "index,follow",
            "description": "Etoto to legalny bukmacher z licencją MF, błyskawicznymi wypłatami, bogatą ofertą zakładów sportowych i esportowych. Sprawdź, co oferuje graczom!",
            "canonicalUrl": "https://etoto-pl.com/"
        },
        "trackers": {
            "requests": 22,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 231,
                "tls": 22,
                "wait": 96,
                "connect": 14,
                "download": 1
            },
            "response_ms": 364
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 16382,
            "co2_grams": 0.0006,
            "cleaner_than": 61
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.158",
                    "host": "casey.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.194.150",
                    "host": "grannbo.ns.cloudflare.com"
                }
            ],
            "zone": "etoto-pl.com"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "etoto-pl.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "casey.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"casey.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416887659, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=6z6-kw3E8Dyhr67H6d1Q2uknQeNlG1vXVHPP6fQpfnE"
            ],
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://etoto-pl.com"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Internet Domain Service BS Corp",
            "created": "2025-07-18T10:16:15Z",
            "updated": "2026-06-10T05:37:48Z",
            "expires": "2027-07-18T10:16:15Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "casey.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```