winecasino[.]io
“Winecasino: Most Popular Online Crypto Casino Based on Blockchain”
winecasino.io — Erreur de serveur (HTTP 502). Usurpation de l'identité de la marque : Genericcrypto; Type d'arnaque : Impersonation. Résumé des preuves: VirusTotal 14/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 92/100. Bureau d’enregistrement: NiceNIC.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain winecasino.io was registered on September 22, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the IP address 188.114.96.3. Its authoritative nameservers are fay.ns.cloudflare.com and vin.ns.cloudflare.com, indicating that the domain is hosted on Cloudflare’s infrastructure. As of the report date, July 24, 2026, the domain remains active and is listed on one public security blocklist. VirusTotal analysis shows that six of ninety‑one scanning engines have flagged the domain, providing modest but notable detection confidence. The domain is also explicitly blocked by the PhishDestroy service, reinforcing its classification as a malicious resource.
No public page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are available in the current intelligence set, leaving the exact content and delivery mechanisms of the site unverified. Consequently, the precise brand or service being spoofed cannot be confirmed; the domain name suggests a casino‑related lure, but no concrete evidence of a targeted brand is present. This uncertainty should be noted when correlating the domain with potential credential‑stealing campaigns.
Defenders should prioritize immediate containment of traffic to winecasino.io by adding the domain and its resolving IP address (188.114.96.3) to outbound filtering rules and DNS sinkhole lists. Monitoring for DNS queries to the Cloudflare nameservers fay.ns.cloudflare.com and vin.ns.cloudflare.com can help detect internal attempts to reach the site. Given the presence on a blocklist and the six VirusTotal detections, security appliances that support threat‑intel feed ingestion should be updated to include this indicator. Continuous re‑evaluation is advised, as further analysis—such as retrieval of the HTTP response, TLS certificate, or page content—may reveal additional tactics, techniques, and procedures used by the operators.
Renseignements sur la sécurité réseau Registrar context
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Latest Classified Outcome 2026-08-15 12:53:43 UTC
Casino / Gambling License Verification
Technologies · 4 identified
Twitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com Confiance à 100 %Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confiance à 100 %Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confiance à 100 %Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confiance à 100 %Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of winecasino.io · checked Jul 24, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif