1bigwin[.]click
Análisis de phishing y seguridad de 1bigwin.click
“1bigwin: Most Popular Online Crypto Casino Based on Blockchain”
1bigwin.click — Contenido no disponible (HTTP 502). Suplantación de marca: Genericcrypto; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 12/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain 1bigwin.click was registered on September 06, 2025 through Web Commerce Communications Limited and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site’s page title, "1bigwin: Most Popular Online Crypto Casino Based on Blockchain," indicates a crypto‑casino lure. No SSL certificate is presented, meaning the site does not provide encrypted HTTPS connections. The domain appears on one security blocklist and has been cited in two AlienVault OTX threat‑intel pulses.
VirusTotal scans show that twelve of ninety‑three security vendors flagged the domain as malicious. Reputation services assign extremely low trust scores—Scamadviser 1/100 and Gridinsoft 1/100—reinforcing the malicious assessment. The infrastructure uses Cloudflare name servers (isabel.ns.cloudflare.com and rajeev.ns.cloudflare.com). Analysis of the payload suggests the use of a Gambler Scam phishing kit, classified as a crypto scam.
The domain is currently taken offline and has been blocked by PhishDestroy. While the exact content of the page has not been captured, the available indicators—blocklist presence, multiple vendor detections, low trust scores, and the Gambler Scam kit—provide sufficient evidence to treat the domain as a high‑risk phishing vector targeting cryptocurrency enthusiasts. Defenders should immediately block 1bigwin.click and its associated IP address, add the domain to internal deny lists, monitor Cloudflare name‑server activity for similar registrations, and watch for other domains employing the same Gambler Scam kit. Continuous threat‑intel feeds should be consulted for any re‑appearance of the infrastructure.
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.