centwin[.]top
Analyse phishing et sécurité de centwin.top
“Centwin: Most Popular Online Crypto Casino Based on Blockchain”
centwin.top — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Genericcrypto; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 12/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. Bureau d’enregistrement: Global Domain Group.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
Analysis as of July 23 2026 indicates that centwin.top is an active crypto‑scam phishing infrastructure. The domain, registered on February 21 2026 through Global Domain Group LLC, resolves to the IP address 188.114.96.3, which belongs to Cloudflare (AS13335) and is geolocated in the United States. The host presents no SSL certificate, and its DNS configuration uses the Cloudflare authoritative servers glen.ns.cloudflare.com and ryleigh.ns.cloudflare.com. The page title returned from the site – “Centwin: Most Popular Online Crypto Casino Based on Blockchain” – aligns with the listed scam type “Crypto Scam” and the identified phishing kit “Gambler Scam”.
The site has been flagged by PhishDestroy and is currently taken offline, but it remains listed on one external security blocklist. VirusTotal analysis shows that 12 of 93 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of fraudulent activity. Gridinsoft assigns a trust score of zero out of one hundred, indicating a complete lack of reputation. Although the site is offline at the time of this report, the underlying IP address and hosting provider remain active, allowing adversaries to redeploy similar payloads or clone the phishing kit.
Defenders should immediately block centwin.top and its resolved IP 188.114.96.3 at network perimeters, update internal threat intel feeds with the domain’s registration and hosting details, and monitor Cloudflare‑hosted assets for reappearance. Continuous re‑scanning of the domain on VirusTotal and similar sandboxes is advised to capture any changes in detection ratios. The limited visibility of the site’s content prevents full characterization of its malicious behavior, so threat‑hunting teams should look for related indicators such as the Gambler Scam kit signatures, traffic to the identified nameservers, and any anomalies targeting cryptocurrency‑related services.
Couverture des données12 recorded checks
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Analyse VirusTotal
Données factuelles et rapports externesIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.