maxwin[.]casino
“Maxwin: Most Popular Online Crypto Casino Based on Blockchain”
Resumen de las pruebas
This domain, maxwin.casino, is flagged as a brand impersonation threat targeting online crypto gambling platforms. Analysis indicates the site mimics legitimate blockchain-based casino services, specifically positioning itself as a popular crypto casino under the name Maxwin. The page title, 'Maxwin: Most Popular Online Crypto Casino Based on Blockchain,' aligns with tactics used to deceive users into engaging with fraudulent gambling or financial transaction platforms. No direct evidence of a crypto drainer kit was observed, but the domain’s infrastructure and branding suggest potential for credential theft or financial fraud associated with cryptocurrency transactions. Infrastructure analysis reveals the domain was registered through NameSilo, LLC, on February 21, 2026, and currently resolves to the IP address 104.21.69.252, hosted by Cloudflare, Inc. (AS13335) in the United States. The SSL certificate is issued by Let’s Encrypt (serial number E8), a common choice for both legitimate and malicious domains. Security vendor detections on VirusTotal report a score of 17/95, indicating moderate but not unanimous consensus on its malicious nature. The domain appears on one security blocklist and has been blocked by PhishDestroy, though it is currently offline. Notably, the creation date is anomalous, suggesting either a typo or an attempt to obscure registration details. Current status indicates the domain is offline, reducing immediate risk to end users. However, the infrastructure remains intact, and the domain could be reactivated or repurposed for similar fraudulent activities. The use of Cloudflare services complicates attribution and takedown efforts, as it masks the true origin of the hosting infrastructure. Remaining risks include potential reuse of the domain, exploitation of cached DNS records, or migration of the threat to a newly registered domain. Users and organizations are advised to block the domain at the network level, monitor for related infrastructure, and educate stakeholders on recognizing brand impersonation tactics in the crypto gambling sector.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-1776878845-maxwin.casino- Artefacto PDF
- Evidencia en PDF
Historial de reportes 2
- Reporte 2 ⚠️ ESCALATION #2 (1750h active): Phishing - maxwin[.]casino
- Reporte 3 ⚠️ ESCALATION #3 (1892h active): Phishing - maxwin[.]casino
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.