Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 10 outgoing records; the latest is dated . The recorded recipient is domainabuse@tucows.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
lordzwin[.]com
lordzwin.com 피싱 및 보안 점검
“Lordzwin: Most Popular Online Crypto Casino Based on Blockchain”
lordzwin.com — 연결 가능 · 액세스가 제한됨 (HTTP 403). 브랜드 사칭: Genericcrypto; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 16/93 (alphaMountain.ai, CRDF, CyRadar, Fortinet, G-Data); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. 등록기관: Tucows.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis indicates that lordzwin.com was registered on 21 February 2026 through Tucows Domains Inc. and immediately pointed to Cloudflare infrastructure, using the nameservers curt.ns.cloudflare.com and maria.ns.cloudflare.com. The domain resolves to IP address 172.67.136.110, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The TLS certificate is issued by Google Trust Services under the WE1 root, confirming that the site employed a valid HTTPS certificate at the time of observation. The HTTP response returned a 403 status code, suggesting that direct content retrieval was blocked or the site was deliberately made inaccessible. The page title retrieved from the site reads “Lordzwin: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the classified scam type of a crypto‑related gambling operation.
Intelligence links the site to the “Gambler Scam” phishing kit, indicating reuse of known malicious templates. Reputation services have flagged the domain. It appears on three security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis recorded 16 detections out of 93 scanning engines, reinforcing the malicious assessment. The combination of a recent registration, Cloudflare‑hosted infrastructure, a valid SSL certificate, and multiple independent detections points to a deliberate attempt to lure victims into a cryptocurrency gambling scam.
Uncertainty remains regarding the current availability of the site; the status is reported as offline, and the 403 response may reflect a takedown rather than a functional phishing page. No additional content or credential‑capture mechanisms have been observed, and the exact phishing workflow has not been publicly disclosed. Defenders should continue to block lordzwin.com at network perimeter and DNS layers, add the domain to internal blocklists, and monitor for any resurgence of the domain or associated IP address.
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
악용 신고 이력 · 10 stored reports over 65 days · click to expand
-
Report #1 Feb 26, 2026 · 22:25 UTCPhishing Abuse Report: lordzwin[.]comdomainabuse@tucows.com
-
Report #2 ICANN CC 88h still active Mar 2, 2026 · 15:12 UTCESCALATION #2 (88h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 137h still active Mar 4, 2026 · 16:05 UTCESCALATION #3 (137h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 180h still active Mar 6, 2026 · 11:10 UTCESCALATION #4 (180h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 433h still active Mar 16, 2026 · 23:35 UTCESCALATION #5 (433h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 1261h still active Apr 20, 2026 · 14:59 UTCESCALATION #6 (1261h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 1315h still active Apr 22, 2026 · 20:27 UTCESCALATION #7 (1315h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #8 ICANN CC 1408h still active Apr 26, 2026 · 17:25 UTCESCALATION #8 (1408h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #9 ICANN CC 1456h still active Apr 28, 2026 · 18:16 UTCESCALATION #9 (1456h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #10 ICANN CC 1554h still active May 2, 2026 · 19:37 UTCESCALATION #10 (1554h active): Phishing - lordzwin[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
Casino / Gambling License Verification
사용 기술 · 1 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%VirusTotal 분석
보관된 증거
증거 및 외부 보고서
PD-20260218-370986 Recipient: domainabuse@tucows.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.