Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 5 outgoing records; the latest is dated . The recorded recipient is abuse@globaldomaingroup.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
winzova[.]com
فحص التصيد والأمان للنطاق winzova.com
“Winzova: Most Popular Online Crypto Casino Based on Blockchain”
winzova.com — يمكن الوصول إليها · الوصول مقيد (HTTP 403). انتحال العلامة التجارية: Genericcrypto; نوع الاحتيال: Crypto Scam. ملخص الأدلة: VirusTotal 13/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); URLQuery 3 alerts; URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 93/100. مسجّل النطاق: Global Domain Group.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
The domain winzova.com was registered on February 21, 2026 through Global Domain Group LLC and is currently listed as taken offline. HTTP requests to the host return a 403 status, indicating that the web server is intentionally denying access. The domain resolves to the IPv6 address 2a06:98c1:3121::3, which belongs to AS13335 operated by Cloudflare, Inc., and the hosting location is identified as the United States. DNS resolution is provided by the Cloudflare authoritative name servers adelaide.ns.cloudflare.com and leonidas.ns.cloudflare.com, and the presented TLS certificate is issued by Google Trust Services under the WE1 certificate authority, suggesting a legitimate certificate chain but not confirming the legitimacy of the hosted content.
Security telemetry shows that winzova.com appears on three independent blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis recorded 13 detections out of 93 scanned vendors, reinforcing the suspicion of malicious activity. The site’s page title, "Winzova: Most Popular Online Crypto Casino Based on Blockchain," together with the classification of the phishing kit as a "Gambler Scam," aligns with a crypto‑focused financial fraud campaign designed to lure victims into a fabricated online casino environment.
Defenders should treat winzova.com as a high‑risk crypto scam infrastructure. The presence on multiple blocklists and the detection count on VirusTotal warrant immediate inclusion in deny‑list policies at network perimeters, proxy filters, and endpoint security solutions. Monitoring for DNS queries to the associated Cloudflare name servers and the IPv6 address can help identify compromised hosts attempting to access the domain before it is fully taken offline. Because the site currently returns a 403 response, active probing may be limited, but threat hunters should still collect any residual logs that reference winzova.
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | winzova.com |
phishing | Phishing Block |
| Hagezi Threat Feed | winzova.com |
malicious | Sinkholed |
| DNS4EU | winzova.com |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
سجل بلاغات إساءة الاستخدام · 5 stored reports over 96 days · click to expand
-
Report #1 Feb 26, 2026 · 22:58 UTCPhishing Abuse Report: winzova[.]comabuse@globaldomaingroup.com
-
Report #2 ICANN CC 99h still active Mar 3, 2026 · 02:06 UTCESCALATION #2 (99h active): Phishing - winzova[.]comabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 136h still active Mar 4, 2026 · 15:20 UTCESCALATION #3 (136h active): Phishing - winzova[.]comabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 180h still active Mar 6, 2026 · 11:07 UTCESCALATION #4 (180h active): Phishing - winzova[.]comabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 2592h still active Jun 2, 2026 · 22:54 UTCESCALATION #5 (2592h active): Phishing - winzova[.]comabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
تحليل VirusTotal
الأدلة المؤرشفة
الأدلة والتقارير الخارجية
PD-20260214-3433F8 Recipient: abuse@globaldomaingroup.com هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب