direttibarbiturici[.]com

PhishDestroy identifies direttibarbiturici.com as a generic phishing domain currently under investigation for impersonating an illicit barbiturates vendor. The site appears designed to harvest payment credentials and personal data from visitors seeking controlled substances outside legal channels. No specific drainer kit or spoofed brand logo was detected in initial crawls, suggesting a low-cost, template-driven operation targeting vulnerable buyers. The domain’s registration and hosting infrastructure align with previously documented phishing campaigns leveraging anonymized registrars and bulletproof hosting to evade takedowns.

Technical indicators confirm high-risk attributes: direttibarbiturici.com resolves to IP 188.114.96.3, registered through Fewmoretaps OU (d/b/a Trustname.com) on December 24, 2025, with a Google Trust Services SSL certificate. VirusTotal shows 0/95 detections as of the latest scan, indicating evasion of major AV engines. The domain remains unlisted on Google Safe Browsing and has not yet been added to public blocklists, prolonging exposure. These factors suggest a recently activated domain with active threat activity but minimal external scrutiny.

The domain is currently active and flagged as high-risk due to its use in luring victims through deceptive advertising on dark web forums and encrypted chat platforms. No immediate takedown response has been initiated by hosting providers or registrars, leaving the threat operational. While the immediate risk is concentrated among users seeking illicit substances, the lack of detections increases the probability of collateral compromise against unsuspecting researchers or accidental visitors. Users are advised to avoid direct interaction and report any observed activity to their security teams or PhishDestroy for enrichment. The investigation remains ongoing, with risk status elevated pending further forensic analysis and takedown coordination.