windex[.]cc

This domain is assessed as high risk because it was associated with brand impersonation targeting a crypto casino. Analysis indicates that the site attempted to present itself as a legitimate gambling-related service, a technique commonly used to steal credentials, cryptocurrency, or other sensitive user information. Although the domain is currently offline, the historical indicators remain relevant because phishing infrastructure is frequently reused or replicated under different domains.

Infrastructure analysis reveals that 19 of 95 security vendors flagged the domain as malicious. The domain was created on February 21, 2026 and registered through NiceNIC International Group Co., Limited. It resolved to IP address 188.114.96.3, with the IP located in the US under AS13335 Cloudflare, Inc. No SSL certificate was present. The recorded page title was "Windex: Most Popular Online Crypto Casino Based on Blockchain." The domain appeared on 3 security blocklists and has since been taken offline. These technical indicators collectively support the assessment that the infrastructure was used for brand impersonation rather than legitimate online activity.

If this domain was visited before it was taken offline, any credentials, wallet information, authentication codes, or financial data entered should be treated as potentially compromised. Passwords associated with affected accounts should be changed immediately, multi-factor authentication should be enabled where available, and account activity should be reviewed for unauthorized access. Security teams should block the domain and associated indicators across network and endpoint controls, monitor for follow-on attacks using related infrastructure, and retain the observed indicators for incident response and threat hunting.