# metawin.best — SUSPICIOUS

> Metawin.best is flagged as a low-risk phishing site. Avoid claiming bonuses or free spins to protect your info from potential fraud.

## Summary
PhishDestroy identifies metawin.best as a generic phishing domain masquerading as a crypto casino offering free spins. Classified under low risk, it targets users with deceptive incentives.

This domain resolves to IP 104.21.10.215 and is registered through NETIM SAS since March 11, 2026. Although only flagged by 2 out of 95 VirusTotal engines, it appears on 3 security blocklists, raising suspicion about its intent.

Currently active, metawin.best remains a threat requiring caution. Users should refrain from engaging with its offers, and security teams need to monitor its activity closely for emerging risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Metawin Crypto Casino | 20 Free Spins every Friday

## Domain Intelligence
- Registered: 2026-03-11 17:07:02
- Registrar: NETIM SAS
- Country: FR
- IP: 104.21.10.215
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["kianchau.ns.cloudflare.com", "monika.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Forcepoint ThreatSeeker", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce7e7-4748-7698-85ad-d348a4d0973a.png
- PhishDestroy: https://phishdestroy.io/domain/metawin.best/
- LLM endpoint: https://phishdestroy.io/domain/metawin.best/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/metawin.best/
Last updated: 2026-03-19