nocta[.]win
Pemeriksaan phishing dan keamanan nocta.win
“Nocta: Most Popular Online Crypto Casino Based on Blockchain”
nocta.win — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Genericcrypto; Jenis penipuan: Crypto Scam. Ringkasan bukti: VT 17/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 1 alert; URLScan malicious; GSB no flag; Spamhaus DBL_PHISH; BL 2 (MetaMask, SEAL); PD 100/100. Registrar: Global Domain Group.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
nocta.win entered the PhishDestroy evidence set on Feb 7, 2026. Stored content metadata identifies Genericcrypto as the apparent target. The stored content classification is crypto scam. The assembled evidence scores 100/100 (critical).
Six independent sources are positive: VirusTotal, MetaMask, SEAL, Spamhaus DBL, URLQuery, and URLScan. VirusTotal recorded 17 detections among 93 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar, Ermes, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, VIPRE on Feb 23, 2026 at 11:43 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 14, 2026 at 10:35 UTC. URLQuery recorded 1 threat-system alert on Feb 7, 2026 at 17:03 UTC. URLScan returned a malicious verdict with score 100 on Feb 7, 2026 at 14:28 UTC. The evidence is not unanimous. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. PhishStats returned no feed match on Mar 1, 2026 at 23:13 UTC.
HTTP 502 was recorded on Aug 7, 2026 at 01:32 UTC; content was unavailable. Registration records for the domain list Global Domain Group LLC as the registrar. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “Nocta: Most Popular Online Crypto Casino Based on Blockchain”. DOM analysis completed on Jul 9, 2026 at 06:20 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Aug 2, 2026 at 04:13 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists WE1 as the certificate issuer with validity through Apr 20, 2026; checked Mar 15, 2026 at 05:44 UTC.
The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as Genericcrypto-themed crypto scam.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | nocta.win |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
ICANN Sudah Dibayar. Akuntabilitas Tak Kunjung Datang.
Untuk gTLD ini, registrar di atas beroperasi berdasarkan kontrak dengan ICANN. ICANN memungut biaya tahunan, biaya variabel, dan biaya berbasis transaksi yang terkait dengan pendaftaran, perpanjangan, dan transfer.
Akreditasi: dimonetisasi. Akuntabilitas: silakan periksa kembali nanti.
Lalu keajaiban dimulai: ICANN menulis RAA §3.18, registrar menyelidiki penyalahgunaan di dalam basis pelanggannya sendiri, dan para korban menyerahkan bukti secara cuma-cuma sementara setiap lapisan menunggu pihak lain bertindak. Jika itu membuat para korban merasa lebih aman, bagus sekali—ternyata tagihannya bekerja.
Riwayat Laporan Penyalahgunaan · 5 stored reports over 86 days · click to expand
-
Report #1 Escalation 22h still active Feb 8, 2026 · 18:31 UTCESCALATION #2 (22h active): Phishing - nocta[.]winabuse@globaldomaingroup.com
-
Report #2 ICANN CC 558h still active Mar 3, 2026 · 02:57 UTCESCALATION #3 (558h active): Phishing - nocta[.]wingdg@dynadot.com abuse@grs-domains.com compliance@icann.org
-
Report #3 ICANN CC 595h still active Mar 4, 2026 · 15:43 UTCESCALATION #4 (595h active): Phishing - nocta[.]wingdg@dynadot.com abuse@grs-domains.com compliance@icann.org
-
Report #4 ICANN CC 638h still active Mar 6, 2026 · 10:58 UTCESCALATION #5 (638h active): Phishing - nocta[.]wingdg@dynadot.com abuse@grs-domains.com compliance@icann.org
-
Report #6 ICANN CC 2073h still active May 5, 2026 · 08:23 UTCESCALATION #6 (2073h active): Phishing - nocta[.]wingdg@dynadot.com abuse@grs-domains.com compliance@icann.org
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive