casino-mafia1-fr[.]com
“Mafia Casino France | Jeux en Ligne & Bonus Exclusifs”
casino-mafia1-fr.com — Ammantato · raggiungibile. Tipo di truffa: Gambling. Riepilogo delle prove: VirusTotal 4/91 (CRDF, Gridinsoft, Kaspersky, SOCRadar); cloaking observed; PhishDestroy score 83/100. Registrar: Fewmoretaps OU d/b/a T….
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain casino-mafia1-fr.com was registered on April 24, 2026 by an entity listed as Fewmoretaps OU d/b/a Trustname.com. DNS resolution points to the address 172.67.134.188, which is hosted within a cloud‑based network located in Canada. The domain is currently active, returns HTTP 200, and presents a TLS certificate issued by a widely used automated certificate authority (identifier E8).
A cursory inspection of the landing page reveals the title "Mafia Casino France | Jeux en Ligne & Bonus Exclusifs", indicating a targeted lure toward French‑speaking gambling audiences. The page structure and content match characteristics of the Gambler Scam phishing kit, which typically harvests credentials for online casino services. No additional pages were observed during the initial request.
Threat intelligence sources have recorded a single pulse referencing this domain, and it appears on one public blocklist. Automated reputation scoring assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. The domain has been flagged by at least one anti‑phishing blocklist, confirming its inclusion in active mitigation feeds. The risk level is listed as under_investigation, and the status remains active.
Defenders should block resolution of casino‑mafia1‑fr.com at the network perimeter and monitor for outbound connections to the associated IP address. Email security gateways should be updated to include the domain in URL and attachment filtering rules. Incident response teams should inspect any credential submissions that may have been directed to this site and advise affected users to reset compromised accounts. Continuous monitoring of the hosting provider’s IP range is recommended to detect potential repurposing of the infrastructure for further campaigns.
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Analisi di VirusTotal
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo