Lompat ke laporan keamanan
Checked 09/08/2026 Ref 673253C0

MALICIOUS — CRITICAL

Pemeriksaan phishing dan keamanan parimatch.to

parimatch[.]to

The domain parimatch.to is currently flagged as an active generic phishing site designed to impersonate legitimate betting platforms.

85/100 evidence score · Critical
VirusTotal
7/91
Blocklists
2 · MetaMask, SEAL
Ketersediaan
Terakhir diketahui aktif · HTTP 200
2026-07-11 08:10 UTCTerakhir diketahui aktif · HTTP 200

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 7. Daftar blokir publik yang melaporkan kecocokan: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is abuse@tonic.to. The latest stored availability evidence still shows the domain reachable; 27 days has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
27 days
Reports sent
1
Latest case ID
PD-20260712-CCC2A7
Current status
HTTP 200 at latest stored check
Jump to section
Ringkasan laporan

parimatch.to — Terakhir diketahui aktif (HTTP 200). Jenis penipuan: Gambling. Ringkasan bukti: VirusTotal 7/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); URLQuery 4 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 85/100. Registrar: Government of Kingdom ….

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Ref 673253C0

The domain parimatch.to is currently flagged as an active generic phishing site designed to impersonate legitimate betting platforms. Analysis indicates this infrastructure is likely targeting users of the Parimatch brand, a well-known online gambling service, to harvest credentials or financial information. The domain remains operational and poses a high risk to visitors seeking legitimate betting services. Infrastructure analysis reveals the domain was registered on September 17, 2025, through the Government of the Kingdom of Tonga, an uncommon registrar for commercial entities. It resolves to the IP address 158.94.211.126, which has been associated with other suspicious domains in recent months. Detection metrics show that 3 of 95 security vendors on VirusTotal have flagged parimatch.to as malicious, a relatively low but notable detection rate that suggests emerging or evasive phishing tactics. No additional blocklist entries or trust scores from major threat intelligence platforms have been recorded at this time, though the domain's recent creation and limited detection history warrant caution. Current status confirms parimatch.to remains active and accessible, indicating the campaign is ongoing. Users are strongly advised to avoid interacting with this domain, particularly those attempting to access betting or gambling services. Organizations should consider implementing DNS-level blocking for 158.94.211.126 and monitoring for related domains registered through the same registrar. Endpoint protection systems should be updated to include this domain in phishing detection rules, and users should be educated on verifying domain authenticity before entering credentials or financial details.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
7 det.
URLQuery
URLQuery
4 threat alerts
CF Radar
Berbahaya
URLScan
URLScan
Usia
11 mo
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data12 recorded checks
VirusTotal 7 / 91 URLQuery 4 threat-system alerts PhishStats tidak diperiksa OTX no community references CF Radar provider verdict: malicious URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS tidak diperiksa TLS tidak ada data sertifikat WHOIS 11 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
Threat Detection Systems 4 alerts
Detection System Indicator Verdict Alert
Cloudflare DNS parimatch.to malicious Sinkholed
Hagezi Threat Feed parimatch.to malicious Sinkholed
DigiCert UltraDNS parimatch.to malicious Sinkholed
CIRA Canadian Shield DNS parimatch.to malicious Sinkholed
CF Cloudflare Radar Verdict Berbahaya
Phishing
SSL Certificate Invalid
SSL certificate is invalid or expired. Issuer:

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
12/13
Ancaman Telah Diterima
parimatch.to telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
11/07/2026
URLScan.io Capture
Stored URLScan report with capture artifacts
11/07/2026
URLScan Verdict
Analisis URLScan selesai; hasil tangkapan web ini tidak mengubah keputusan ancaman halaman · score 0
29/07/2026
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
7/91 recorded on VirusTotal
05/08/2026
Google Safe Browsing
11/07/2026
Deteksi Daftar Blokir
Ditemukan di 2 blocklists: MetaMask, SEAL
09/08/2026
CF Radar: Malicious
Cloudflare Radar classified this domain as phishing
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
11/07/2026
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Sent Report Recorded
Stored sent-report record for registrar Government of Kingdom of Tonga, hosting provider, 2 abuse contacts
abuse@tonic.toabuse@omegatech.sc
12/07/2026
Daftar yang Dihapus Telah Dipublikasikan
11/07/2026
Monitoring Continues
Domain tetap dapat dijangkau atau aksesnya dibatasi; pemeriksaan di masa depan dapat memperbarui pengamatan ini.

Status Daftar Blokir Publik

Tangkapan tersimpan

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Server / ASN nginx/1.22.1 · AS202412 Omegatech LTD
Reputasi IP abuse score 0/100 0 reports checked 12/07/2026
Registrar Government of Kingdom …
Alamat IP 158.94.211.126 US
LokasiUS New York, US
JaringanAS202412 · Omegatech LTD
PendaftaranDibuat 17/09/2025 (325d) Expires 17/09/2027
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi11/07/2026
DOM Analysisanalyzed 11/07/2026score 70/100
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://parimatch.to/
Server namajoel.ns.cloudflare.comsummer.ns.cloudflare.com
TLS Observationscanned 09/08/2026
Favicon Hash
Case ID
Judul Halaman
Parimatch - Play Slots with Bonuses Online
Casino / Gambling License Verification
Unverified gambling license
This domain markets casino/gambling services. Scam casinos routinely display fake Curaçao, MGA, or Kahnawake license badges that don’t exist in the real registries. Always verify the license number against the official regulator database before depositing. If the site shows a seal but no clickable registry link — or the linked registry page doesn’t exist — treat it as fraudulent.
Curaçao eGaming (official) Malta Gaming Authority UK Gambling Commission PA Gaming Control Kahnawake Gaming Gibraltar Gambling
Teknologi · 1 identified
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

7 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
CRDF
Forcepoint ThreatSeeker
Fortinet
Gridinsoft
Seclookup
SOCRadar
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/parimatch.to"
  title="PhishDestroy threat report for parimatch.to"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>