vegasplay[.]fun
“VEGASPLAY | Play at the best online casino based on Blockchain”
vegasplay.fun — Encoberto · alcançável. Representação da marca: Cryptoscam; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; cloaking observed; PhishDestroy score 100/100. Registrador: Beget.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain vegasplay.fun was registered on January 02, 2025 through Beget LLC. It resolves to IP 69.5.189.54 in CH under AS42624 Global-Data System IT Corporation. The nameservers are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com and ns4.nameserver. The SSL certificate was issued via GoDaddy.com as GoDaddy TLS Intermediate CA DV - R1v1. The domain returns HTTP status 200 and remains listed as active under threat type generic_phishing with risk level high.
Detection data shows VirusTotal flags from 8 out of 95 security vendors. The domain is blocked by PhishDestroy and appears on 1 security blocklist. AlienVault OTX lists it in 1 threat intelligence pulse. Gridinsoft assigns a trust score of 0 out of 100. The phishing kit in use is identified as Gambler Scam and the scam classification is cryptocurrency.
The page title recorded for the domain is VEGASPLAY | Play at the best online casino based on Blockchain. Infrastructure analysis reveals consistent use of the reported nameservers and registrar across the active period since creation. These elements together support the high-risk designation assigned to the domain.
Exact page content and live behavior have not been directly examined beyond the supplied title and metadata, leaving some operational details uncertain. The registration date in 2025 falls within the normal historical range and does not by itself establish anomalous timing.
Defenders should add both the domain vegasplay.fun and IP 69.5.189.54 to block lists at network and endpoint layers. Continued monitoring for new domains sharing the same nameserver set or registrar is recommended. Regular checks against updated threat intelligence pulses and blocklist feeds will help maintain coverage against this still-active entry.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo