casihead.cc — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Genericcrypto; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 6/94 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 68/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
PhishDestroy first observed casihead.cc on Apr 20, 2026. Stored content metadata identifies Genericcrypto as the apparent target. The captured page title is “Casihead: Most Popular Online Crypto Casino Based on Blockchain”. Evidence score: 68/100 (high).
5 independent sources recorded positive findings: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLScan. VirusTotal recorded 6 detections among 94 engines: alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, Webroot on Apr 20, 2026 at 12:52 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 10:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 18:35 UTC. URLScan returned a malicious verdict with score 100; scan metadata assigned phishing as its category on Jul 29, 2026 at 03:07 UTC.
HTTP 502 was recorded on Aug 9, 2026 at 01:33 UTC; content was unavailable. Latest classified outcome: registration hold observed; cause registrar client hold; mechanism client hold; observed actor NICENIC INTERNATIONAL GROUP CO., LIMITED on Aug 9, 2026 at 01:47 UTC. Registration records for the domain list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar and Feb 24, 2026 as the creation date. At collection time, the hostname resolved to 104.21.43.62 on AS13335 (Cloudflare, Inc.). The evidence archive retains 2 visual captures from PhishDestroy and URLQuery.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Latest Classified Outcome 2026-08-09 03:47:46 UTC
Teknologi · 4 identified
Conversion and audience tracking pixel for paid campaigns on X (Twitter) — signals that the site runs paid X ads.
business.x.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnalisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of casihead.cc · checked Apr 20, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260420-798772 Recipient: abuse@nicenic.net Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.