skyslots[.]us
“SKYSLOTS | Play at the best online casino based on Blockchain”
skyslots.us — Conteúdo indisponível (HTTP 502). Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 8/95 (alphaMountain.ai, BitDefender, Forcepoint ThreatSeeker, Fortinet, G-Data); URLQuery 100 det.; PhishDestroy score 100/100. Registrador: NameCheap.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis performed on 24 July 2026 identifies the domain skyslots.us as an active component of a crypto‑focused gambling phishing campaign. The site was registered through NameCheap on 4 July 2025 and resolves to the IPv4 address 69.5.189.54, which belongs to AS42624 Global‑Data System IT Corporation in Switzerland. The domain is served by four nameservers (ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, ns4.nameserverhub.com). No TLS certificate is presented, indicating that the site operates over plain HTTP. The page title returned from the host reads “SKYSLOTS | Play at the best online casino based on Blockchain,” suggesting an attempt to lure victims with a blockchain‑based casino narrative.
The payload has been linked to the publicly available “Gambler Scam” phishing kit, and the site is classified as a crypto scam in the intelligence feed. Reputation services show a Gridinsoft trust score of 1 / 100 and eight of ninety‑five VirusTotal scanners flagged the domain, reflecting a high likelihood of malicious intent. The domain appears on one external blocklist and has been taken down by the PhishDestroy remediation network. It is currently listed as offline, which may be the result of takedown actions or the operator’s own shutdown.
Uncertainty remains regarding the current operational status of the underlying phishing infrastructure, as the domain is offline but the IP address is still allocated to a hosting provider. No SSL/TLS, no safe‑browsing verdict, and limited blocklist presence mean that defenders should continue to monitor the IP and associated nameservers for potential re‑use. Defensive recommendations include adding the domain and its IP to web‑gateway block lists, configuring DNS‑level deny rules for the nameservers, and increasing telemetry on traffic toward the AS42624 network.
Sinais de segurança
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Casino / Gambling License Verification
Análise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo