guest[.]bellarinox860[.]it

The domain guest.bellarinox860.it was registered on March 11, 2026 through Dynadot LLC and is currently active. It resolves to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. DNS resolution is handled by the Cloudflare nameservers drew.ns.cloudflare.com and daniella.ns.cloudflare.com. The site presents an HTTP 301 redirect and serves a TLS certificate issued by Google Trust Services under the WE1 profile. Google Safe Browsing flags the domain for SOCIAL_ENGINEERING, and eight of ninety‑four VirusTotal scanners have raised detections. The page title “🇮🇹 Bellarinox +860 — Il Software Scelto dai Professionisti” suggests a crypto‑related offering, consistent with the classified scam type of a crypto scam. The domain is listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 / 100, reinforcing the high‑risk assessment. The intelligence indicates brand impersonation targeting the generic "base" brand. No further content analysis is available, so the exact malicious payload or credential‑harvesting mechanisms remain unknown. Defenders should block the domain at the DNS and proxy layers, monitor for outbound connections to the associated Cloudflare IP, and consider sinkholing the address to prevent further user exposure. Continuous re‑evaluation is advised as additional indicators may emerge.