letxwin[.]com

The domain letxwin.com was registered on July 21 2025 through MAT BAO CORPORATION and taken offline by July 22 2026. Infrastructure analysis shows the domain resolved to IP 57.129.97.29, an address owned by AS16276 OVH SAS located in Germany. The SSL certificate presented for the site lists “XUI.one” as the common name, indicating a mismatch between the certificate and the advertised sport‑focused brand.

Gridinsoft assigned a trust score of 0 / 100, and the page title returned by the HTTP 200 response reads “LETXWIN | Enter the world of sport and stakes!” The campaign is classified as a brand‑impersonation scam targeting the “blast” brand and employs the Gambler Scam phishing kit. VirusTotal reports a single positive detection out of 95 scanners, and the domain appears on one public blocklist, currently blocked by PhishDestroy. The limited detection footprint suggests rapid takedown after deployment.

Defenders should add the IP 57.129.97.29 to network blocklists, enforce TLS inspection to detect the mismatched XUI.one certificate, and monitor for any future domains registered by the same registrar or using the same SSL CN. Continuous observation of OVH‑hosted addresses for similar kit signatures is advisable. At present, no further evidence of active phishing pages is available, and the domain’s offline status limits immediate threat exposure, but the observed indicators warrant precautionary controls.