# casewin.gd — SUSPICIOUS

> casewin.gd is an active phishing domain posing low-level risks. Learn how it operates and how to stay protected from scams.

## Summary
PhishDestroy identifies casewin.gd as an active phishing domain that presents a low-risk threat. Although flagged by only a small number of security vendors, this domain’s recent creation and registration through NICENIC INTERNATIONAL GROUP CO., LIMITED suggest it is part of ongoing phishing efforts targeting unsuspecting users.

This phishing operation typically involves deceptive tactics where users are lured to casewin.gd, which may attempt to steal sensitive personal or login information. The domain resolves to an IP address associated with web hosting services commonly abused for fraudulent purposes, signaling that attackers are preparing to capture user data through fake login pages or social engineering schemes.

If you have visited casewin.gd, it is crucial to avoid entering any personal or financial details and promptly scan your device for malware. Users should change passwords for accounts that might be linked and monitor their financial statements for unusual activity. Remaining cautious and reporting suspicious websites to cybersecurity platforms like PhishDestroy helps to reduce the impact of such phishing campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Page title: Casewin: Most Popular Online Crypto Casino Based on Blockchain

## Domain Intelligence
- Registered: 2026-03-05 13:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.66.141
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: lou.ns.cloudflare.com rosa.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/vC3LtH2H/1bc1f976adb4.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/casewin.gd
- Wayback Machine: https://web.archive.org/web/https://casewin.gd
- PhishDestroy: https://phishdestroy.io/domain/casewin.gd/
- LLM endpoint: https://phishdestroy.io/domain/casewin.gd/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casewin.gd/
Last updated: 2026-03-19