mostbet-uz-casino[.]it[.]com

PhishDestroy identifies mostbet-uz-casino.it.com as a credential harvesting phishing domain actively impersonating the Mostbet UZ casino platform. The threat involves tricking users into submitting sensitive login credentials or payment details through a spoofed registration page, leveraging the trusted brand of Mostbet to increase credibility. This domain specifically targets Uzbek-speaking users with a localized page title promoting a 2026 sign-up bonus, indicating a highly targeted social engineering campaign designed to exploit regional gambling interests.

This domain was flagged during active monitoring and currently resolves to IP address 172.67.207.179, using a Let’s Encrypt SSL certificate to enhance authenticity. VirusTotal analysis shows 0 detections out of 95 scanners, suggesting this threat remains under the radar of most security platforms. The domain employs a deceptive second-level structure (it.com) to mimic legitimacy, while the actual registration details and hosting infrastructure require further forensic investigation to determine registrar, creation date, or association with known blocklists. The SSL certificate issued by Let’s Encrypt does not imply trustworthiness, as threat actors frequently exploit free certificates to lend false credibility to phishing domains. Trust scores and historical WHOIS data remain unavailable due to potential privacy protections or recent registration.

The risk posed by mostbet-uz-casino.it.com is categorized as active and under investigation, with a high likelihood of user deception due to brand impersonation and localized lures. To mitigate exposure, users should immediately block the domain via hosts file or firewall rules targeting IP 172.67.207.179. Security teams are advised to monitor for DNS resolution to this IP, scan networks for outbound connections, and report the domain to threat intelligence platforms such as PhishTank, OpenPhish, and abuse channels at the hosting provider. Additionally, end users should verify official domains through secure channels and avoid clicking unsolicited links in emails or social media, especially those offering unrealistic bonuses or urgent registration demands. Proactive user education on recognizing domain spoofing and SSL misuse is critical in preventing credential theft and financial loss.