MALICIOUS — CRITICAL
Verifica phishing e sicurezza per toto911win.com
toto911win[.]
The domain toto911win.com is currently under investigation for generic phishing activity.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Disponibilità
- Ultimo attivo conosciuto · HTTP 301
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
toto911win.com — Ultimo attivo conosciuto (HTTP 301). Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 73/100. Registrar: Fewmoretaps OU d/b/a T….
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain toto911win.com is currently under investigation for generic phishing activity. This type of threat typically involves fake login pages designed to steal user credentials. The site's title, 'TOTO911: Login Link Alternatif Slot Resmi Akses Tanpa Lag Indonesia,' suggests it masquerades as an online gambling platform to trick visitors into entering sensitive information. While the site is now offline, users should remain vigilant as similar domains may appear.
Technical indicators paint a concerning picture. The domain was created on March 17, 2026, a very recent date, and is registered through Fewmoretaps OU d/b/a Trustname.com. It resolves to IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate (E8). Although VirusTotal shows 0 out of 95 detections, the domain appears on 1 security blocklist and has been found in 8 AlienVault OTX threat intelligence pulses. These signals, combined with its phishing-oriented page title, warrant caution even though it is currently offline.
To stay safe, users should never enter personal information or credentials on suspicious gambling-related sites. If you have already interacted with toto911win.com, change passwords for any accounts used and monitor for unauthorized activity. Enable two-factor authentication where possible and consider reporting the domain to cybersecurity authorities. While the site is no longer accessible, similar phishing campaigns may emerge under different domain names.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.