Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
m[.]drwinxglobaloos[.]cc
“drwinxgolballtd”
Résumé des preuves
The domain m.drwinxglobaloos.cc has been classified as a high-risk phishing threat, actively listed on three security blocklists including SEAL, MetaMask, and PhishDestroy. The domain was created on July 30, 2025, and is currently registered through NameCheap, Inc. Its page title, drwinxgolballtd, suggests a potential attempt to impersonate a legitimate entity, which is a common tactic employed in phishing schemes. Infrastructure analysis reveals that the domain resolves to the IP address 104.21.27.175, which may be indicative of a broader network of malicious sites if tied to shared hosting environments. Additionally, a review of security vendor assessments on VirusTotal indicates that 14 out of 95 vendors have flagged this domain, highlighting a significant level of concern regarding its legitimacy.
The domain employs several technologies including Ant Design, Vue.js, and Cloudflare, indicating an attempt to create a sophisticated and potentially legitimate-seeming interface. The presence of an SSL certificate issued by Google Trust Services adds a layer of complexity; while SSL can provide a false sense of security, it does not guarantee the authenticity of the site. Furthermore, the Gridinsoft trust score for this domain is notably low at 0 out of 100, reinforcing its classification as a high-risk entity.
Given the current status of the domain as active, it poses a tangible threat to users who may encounter it. Defenders are advised to block access to this domain across all relevant networks and inform users of the potential risks associated with similar domains. Continuous monitoring should be implemented to keep abreast of any changes in the domain's operational status or its hosting details. Additionally, caution should be exercised regarding any communications or links that appear to originate from this domain, as they may facilitate phishing attempts aimed at credential harvesting or financial fraud.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260316-F6CAB0- Titre de la page capturée
- drwinxgolballtd
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Policy Violations: Domain Registration Agreement prohibits hacking, misuse of domain to conduct attacks, scam and fraudulent activities; AUP allows immediate suspension
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | pc.drwinxglobaloos.cc |
malicious | Sinkholed |
| DNS4EU | pc.drwinxglobaloos.cc |
malicious | Sinkholed |
| DNS4EU | m.drwinxglobaloos.cc |
malicious | Sinkholed |
| Cloudflare DNS | m.drwinxglobaloos.cc |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
VirusTotal
0 → 13
-
VirusTotal
16 → 14
-
État du domaine
Accessible → Inaccessible
-
État du domaine
Inaccessible → Accessible
-
État du domaine
Accessible → Inaccessible
-
État du domaine
Inaccessible → Accessible
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of m.drwinxglobaloos.cc · checked Jul 12, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif