MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für win-slots.world
win-slots[.]
win-slots.world was observed hosting a crypto‑scam landing page titled “WIN‑SLOTS | Play at the best online casino based on Blockchain”.
- VirusTotal
- 8/95
- Blocklists
- No stored match
- Verfügbarkeit
- Inhalt nicht verfügbar · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
win-slots.world — Inhalt nicht verfügbar (HTTP 502). Betrugstyp: Crypto Scam. Zusammenfassung der Beweislage: VirusTotal 8/95 (alphaMountain.ai, CyRadar, ESET, Forcepoint ThreatSeeker, Google Safebrowsing); URLQuery 100 det.; Spamhaus DBL_SPAM; PhishDestroy score 95/100. Registrar: SC-GLOBAL-DATA-2004012….
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
win-slots.world was observed hosting a crypto‑scam landing page titled “WIN‑SLOTS | Play at the best online casino based on Blockchain”. The site resolved to the IPv4 address 69.5.189.54, which is allocated to AS42624 (Global‑Data System IT Corporation) and geolocated to Switzerland (CH). The domain is registered through SC‑GLOBAL‑DATA‑20040120, and its authoritative name servers are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserver. The TLS certificate presented for the site is issued to Internet Widgits Pty Ltd. VirusTotal analysis recorded 8 detections out of 95 scanned engines, indicating a moderate level of malicious labeling.
The domain appears on a single security blocklist and is specifically blocked by PhishDestroy. Malware analysis attributes the site to the Gambler Scam phishing kit, a known template used to lure victims into cryptocurrency‑based gambling fraud. As of the report date (24 July 2026) the host is taken offline, but the infrastructure details remain active and could be reused.
Uncertainty remains regarding the current hosting provider and whether additional IPs are associated with the campaign. Defenders should continue to monitor the IP 69.5.189.54 and related ASN for new activity, enforce blocklisting of the domain and its name servers, and consider adding the certificate fingerprint to TLS inspection rules. Incident response teams should treat any communications referencing win‑slots.world as malicious and advise users to avoid interacting with the site or any URLs derived from it.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal-Analyse
Archivierte Beweise
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.