# vexawin.com — SUSPICIOUS

> Discover the risks linked to vexawin.com, flagged for phishing activity. Stay informed and protect yourself from potential scams today.

## Summary
PhishDestroy identifies vexawin.com as a low-risk generic phishing domain. It was registered recently, on March 4, 2026, and classified based on suspicious activity patterns commonly associated with phishing schemes targeting unsuspecting users.

Technically, vexawin.com resolved to the IP address 104.21.87.49 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. While only 2 out of 95 security vendors flagged this domain on VirusTotal, the indicators suggest it was used to impersonate legitimate services to steal sensitive information.

Currently, vexawin.com is offline, indicating that mitigation efforts or takedown actions have been successful in neutralizing the threat. Users are advised to remain vigilant and avoid interacting with unknown or suspicious domains to prevent exposure to phishing scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 666)
- Page title: Vexawin: Most Popular Online Crypto Casino Based on Blockchain

## Domain Intelligence
- Registered: 2026-03-05 01:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.87.49
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: carrera.ns.cloudflare.com mitch.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/MyBYQy8J/e00e2652a478.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/vexawin.com
- PhishDestroy: https://phishdestroy.io/domain/vexawin.com/
- LLM endpoint: https://phishdestroy.io/domain/vexawin.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/vexawin.com/
Last updated: 2026-03-19