ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
FBI IC3
Amerika Birleşik Devletleri'nde internet bağlantılı suçları bildirin
Federal tips line1-800-CALL-FBI
MALICIOUS — CRITICAL
podawin[.]com
Podawin.com is a suspicious website that impersonates a legitimate online crypto casino or gambling platform.
72/100 evidence score · Critical
- VirusTotal
- 6/92
- Blocklists
- 2 · MetaMask, SEAL
- Kullanılabilirlik
- Gizlenmiş · ulaşılabilir · HTTP 666
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
Rapor özeti
podawin.com — Gizlenmiş · ulaşılabilir (HTTP 666). Marka kimliğine bürünme: Genericcrypto; Dolandırıcılık türü: Brand Impersonation. Kanıt özeti: VirusTotal 6/92 (ADMINUSLabs, alphaMountain.ai, BitDefender, G-Data, Gridinsoft); URLQuery 1 alert; URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 72/100. Kayıt kuruluşu: Fewmoretaps OU d/b/a T….
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
Podawin.com is a suspicious website that impersonates a legitimate online crypto casino or gambling platform. Its goal is to trick users into thinking they are visiting a trusted brand, when in reality the site may attempt to steal personal information, login credentials, or cryptocurrency deposits. This type of brand impersonation is a common tactic used by scammers to exploit the trust people have in well-known gambling sites.
Our research shows that podawin.com was created relatively recently, on May 11, 2026, and is registered through Fewmoretaps OU d/b/a Trustname.com. The site uses a Let's Encrypt SSL certificate (E7) to appear legitimate, but security vendors are not fooled: VirusTotal reports that 6 out of 95 security vendors flag this domain as malicious. It also appears on three security blocklists and resolves to IP address 104.21.20.120. These technical indicators strongly suggest that the site is not safe to use.
If you have visited podawin.com or entered any personal information, you should take immediate action. Change any passwords you may have used on the site, enable two-factor authentication on your accounts, and monitor your financial accounts for unauthorized transactions. It is also a good idea to run a security scan on your device. Avoid interacting with the site further and report it to your country's cybercrime reporting center. Staying vigilant against such impersonation scams is key to protecting yourself online.
VirusTotal
6 det.
URLQuery
1 threat alert
DNS Security
1/14
URLScan
TLS sertifikası
Let's Encrypt
Yaş
3 mo New
Gözlemlenen durum
Gizlenmiş · ulaşılabilir 666
DestroyList
Listede
Reports Sent
1
Veri kapsamı12 recorded checks
VirusTotal
6 / 92
URLQuery
1 threat-system alert
PhishStats
checked — no match recorded
OTX
no community references
CF Radarı
scan completed
URLScan capture
saklanan rapor
URLScan verdict
malicious
DNS engellemeleri
1/14
TLS
valid certificate, 82d
WHOIS
3 mo old
Ekran görüntüsü
3 captures · 3 sources
Yönlendirme zinciri
araştırılmadı
Ağ Güvenliği İstihbaratı Registrar context
DNS Provider Blocks
1 / 14
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | podawin.com |
malicious | Sinkholed |
Registrar context
Trustname
Stored registration data identifies Trustname / Fewmoretaps OÜ (IANA 4318) as the registrar. PhishDestroy maintains a separate registrar investigation; that material is contextual and is not an independent detection for this domain.
Tehdit Müdahale Pipeline
Keşif
Checks
Reports
Kullanılabilirlik
14/15
Sent Report Recorded
Stored sent-report record for registrar Fewmoretaps OU d/b/a Trustname.com, hosting provider, 1 abuse contact
abuse@trustname.com
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Alan adı
URLScan Verdict
Zararlı
score 100 Phishing report ↗
Sunucu / ASN
cloudflare · AS13335 Cloudflare, Inc.
IP Context
Cloudflare shared edge
origin IP hidden
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
Kayıt kuruluşu
Fewmoretaps OU d/b/a T…
(BY)
PhishDestroy Investigation
(BY)
PhishDestroy Investigation
IP adresi
104.21.20.120
CDN
Coğrafi konum
Toronto, CA
Toronto, CAAğAS13335 · Cloudflare, Inc.
Kaynak IP, bir CDN proxy'sinin arkasına gizlenir. Uç adresine ilişkin Ters IP sonuçları ilgisiz kiracılar içerir; Kaynağı bulmak için pasif DNS veya sertifika şeffaflığı verileri gerekir.
KayıtOluşturuldu 19.05.2026 (82d · New)
Scanner Response666 · Scanner Cloaked server lies to bots, serves real content to users
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
İlk Kez Tespit Edildi19.05.2026
IoC Extractionscanned 01.08.20260 wallet · 0 Telegram IoCs
Submitted URLhttps://podawin.com/
Ad sunucularıveronica.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 11.05.2026scanned 19.05.2026
Favicon Hash
Case ID
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Akreditasyon bir sözleşmedir, güvenlik mührü değil.
ICANN ücretlerini doğrulayın
RAA §3.18'i okuyun
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Casino / Gambling License Verification
Unverified gambling license
This domain markets casino/gambling services. Scam casinos routinely display fake Curaçao, MGA, or Kahnawake license badges that don’t exist in the real registries. Always verify the license number against the official regulator database before depositing. If the site shows a seal but no clickable registry link — or the linked registry page doesn’t exist — treat it as fraudulent.
Teknolojiler · 4 identified
Twitter Ads
Advertising
Twitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com %100 güven
Facebook Pixel
Analytics
Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com %100 güven
Cloudflare Browser Insights
Analytics
RUM
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com %100 güven
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güven
Detected via Cloudflare Radar · Wappalyzer engine
Bu Alan Adını Bildir
Kanıt sunun ve başkalarını korumaya yardımcı olun
VirusTotal Analizi
6 / 92 güvenlik sağlayıcıları bu alanı işaretledi
View on VT
Last analyzed
ADMINUSLabs
alphaMountain.ai
BitDefender
G-Data
Gridinsoft
Kaspersky
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of podawin.com · checked May 19, 2026
53
Needs Work
Performance
FCP
1.38s
First Contentful Paint
LCP
13.26s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
854ms
Total Blocking Time
SI
4.22s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Güvenlik Analizi
Third-Party Detection — ChainAbuse
1 report filed for podawin.com · category: Phishing · source checked
Flagged by PhishFort Detection System on May 20, 2026 — automated submission, not a user testimony.
Source: ChainAbuse (TRM Labs).
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260519-46CB36 Recipient: abuse@trustname.com Page title stored with report: Podawin: Most Popular Online Crypto Casino Based on Blockchain
OSINT ve İstihbarat
DNS ve Ağ
SEO ve Alan Adı
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Action Fraud
İngiltere, Galler ve Kuzey İrlanda'da dolandırıcılık ve siber suçları bildirin
Contact centre0300 123 2040
PhishDestroy listing review Bir kolluk kuvveti raporu değil
Alan Adı İtirazı
Bu alanın sahibiyseniz ve girişin hatalı olduğunu düşünüyorsanız inceleme isteğinde bulunun
Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
97 ülke rehberi
Yapay zeka destekli taslak — olay ayrıntıları yapay zeka sağlayıcısı tarafından işlenir
Kendiniz inceleyin ve gönderin
İlgili Altyapı ve RaporlarStored relationships and adjacent records
Content matches 4
Aynı kayıt kuruluşu: Fewmoretaps OU d/b/a T… 6
dotexplay.com 
drughub-marketdarknet.com 
wlfinance.info 
account.metadao-dex.com 
beodux.com Genericcrypto impersonation 8
These domains also target Genericcrypto users. View all Genericcrypto threats →
xamanwindowswallet.com Gambler Scam kit 8
Part of the Kumar Dolandırıcılığı phishing campaign. View all campaign domains →
Son tehdit raporları 4
PhishDestroy veritabanından yeni eklenen raporlar. Bu keşif bağlantıları, paylaşılan altyapı veya mülkiyet anlamına gelmez.
lizsbs.shop 