www-bingo63[.]com

Analysis conducted on July 25, 2026 identifies www-bingo63.com as a confirmed cryptocurrency‑related impersonation site targeting Metamask users. The domain was registered on February 21, 2026 and currently resolves to IP address 188.114.96.3, which belongs to Cloudflare, Inc. (ASN 13335) and is geolocated in the United States. The TLS certificate presented by the host is identified as “WE1”, indicating a standard Cloudflare‑issued certificate without any extended validation. The HTTP response code indicates the site is presently offline, consistent with the “taken offline” status reported by intelligence feeds. Reputation checks show a Gridinsoft trust score of 0 out of 100, reflecting an extremely low confidence rating.

VirusTotal scans have returned six positive detections out of ninety‑three antivirus engines, confirming malicious classification by multiple vendors. The domain is listed on two public security blocklists and is actively blocked by the PhishDestroy and ScamSniffer filtering services. AlienVault OTX records the domain in one threat‑intel pulse, further corroborating its malicious nature. The site’s page title is reported as “Bingo63.com”, and the listed scam type is “Crypto Scam”. The intelligence explicitly states the site impersonates Metamask, indicating the likely use of credential‑stealing or wallet‑draining techniques aimed at cryptocurrency users.

No additional content analysis is available, and the exact phishing kit or payload has not been observed. Given the convergence of multiple independent indicators—low trust score, vendor detections, blocklist presence, and attribution to a Metamask impersonation campaign—defenders should treat www-bingo63.com as a high‑confidence malicious infrastructure element. Network defenders are advised to block outbound connections to the associated IP address 188.114.96.