MALICIOUS — CRITICAL
فحص التصيد والأمان للنطاق winsbi.com
winsbi[.]
PhishDestroy identifies winsbi.com as a high-risk brand impersonation domain masquerading as the legitimate Base cryptocurrency platform.
- VirusTotal
- 9/94
- Blocklists
- 2 · MetaMask, SEAL
- التوفر
- المحتوى غير متوفر · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
winsbi.com — المحتوى غير متوفر (HTTP 502). انتحال العلامة التجارية: Genericcrypto; نوع الاحتيال: Brand Impersonation. ملخص الأدلة: VirusTotal 9/94 (Fortinet, Gridinsoft); URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 87/100. مسجّل النطاق: NiceNIC.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
PhishDestroy identifies winsbi.com as a high-risk brand impersonation domain masquerading as the legitimate Base cryptocurrency platform. This fraudulent site specifically targets users seeking crypto investment opportunities, presenting itself as a 'Most Popular Online Crypto Casino Based on Blockchain' to lure victims into fraudulent transactions or credential theft. The domain leverages blockchain-themed language to appear legitimate while concealing its malicious intent behind a superficially plausible facade.
This domain was flagged by only 2 of 95 VirusTotal security vendors, indicating limited but significant detection across the security community. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 11, 2026, the domain resolves to IP 172.67.180.209 and operates with a Let's Encrypt SSL certificate—tactics commonly abused by threat actors to establish false credibility. Such low detection rates and recent domain age often correlate with emerging or highly targeted malicious campaigns.
Users who visited winsbi.com should immediately cease any interaction with the site, avoid entering credentials or cryptocurrency transactions, and scan their devices for potential malware. Report this domain to your organization’s security team or to a threat intelligence platform using the seed identifier 67359a. If sensitive data was entered, reset passwords and monitor financial accounts closely for unauthorized activity.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات14 recorded checks
مؤشرات الأمان
استخبارات أمن الشبكات Registrar context
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 04:33:48 UTC
سجل بلاغات إساءة الاستخدام · 2 stored reports over 15 days · click to expand
-
Report #1 Apr 20, 2026 · 14:54 UTCPhishing Abuse Report: winsbi[.]comabuse@nicenic.net
-
Report #2 ICANN CC 351h still active May 5, 2026 · 06:02 UTCESCALATION #2 (351h active): Phishing - winsbi[.]comabuse@nicenic.net abuse@verisign-grs.com compliance@icann.org
التقنيات · 4 identified
Conversion and audience tracking pixel for paid campaigns on X (Twitter) — signals that the site runs paid X ads.
business.x.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comتحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of winsbi.com · checked Apr 20, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260420-C834C1 Recipient: abuse@nicenic.net Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.