ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
FBI IC3
Amerika Birleşik Devletleri'nde internet bağlantılı suçları bildirin
Federal tips line1-800-CALL-FBI
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 10 outgoing records; the latest is dated . The recorded recipient is abuse@spaceship.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
7 months
Reports sent
10
Latest case ID
PD-1767733771-wingo.casino
Current status
Observed active at latest stored check
Etki alanı güvenliği ve tehdit istihbaratı
wingo[.]casino
“Wingo: Most Popular Online Crypto Casino Based on Blockchain”
Tehdit kararı
Kritik
100/100 kanıt puanı
Kullanılabilirlik
Doğrulanmamış
Mevcut erişilebilirlik doğrulanmadı
Risk sinyalleri
VirusTotal algılamaları: 15/95
Spamhaus DBL: DBL_SPAM
Saklanan engelleme listesi eşleşmeleri: 2
URLQuery threat systems: 3 alerts
Marka kimliğine bürünme: Genericcrypto
Rapor özeti
wingo.casino — Doğrulanmamış. Marka kimliğine bürünme: Genericcrypto; Dolandırıcılık türü: Crypto Scam. Kanıt özeti: VirusTotal 15/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_SPAM; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Kayıt kuruluşu: Cloudflare.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Kanıt özeti
KRİTİK
On July 23 2026 the domain wingo.casino was observed hosting a fraudulent crypto‑casino page titled “Wingo: Most Popular Online Crypto Casino Based on Blockchain”. Infrastructure analysis shows the domain resolves to the Cloudflare edge address 172.67.169.241, advertised under AS13335 Cloudflare, Inc. and located in the United States. Registration is handled through Cloudflare, Inc. with authoritative nameservers bart.ns.cloudflare.com and fay.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and proxy services. The site presented an HTTPS certificate issued by Google Trust Services (WE1), confirming the presence of a valid TLS certificate despite the malicious intent. Threat intelligence flags the domain on three independent security blocklists and it is actively blocked by PhishDestroy, MetaMask and SEAL.
VirusTotal scans returned 15 positive detections out of 95 vendors, and the Gridinsoft trust score is 1 / 100, reflecting a highly suspicious reputation. AlienVault OTX references the domain in a single threat‑intel pulse, further corroborating its malicious nature. The HTTP response code reported was 666, an uncommon status that may be employed to evade standard monitoring. The observed phishing kit matches the “Gambler Scam” profile, and the campaign is classified as a crypto‑scam targeting users seeking cryptocurrency gambling services.
Current operational status is offline, which may be temporary or the result of takedown actions. Uncertainty remains regarding the exact victim interaction flow, as the page content has not been publicly archived. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for re‑registration or use of sibling domains, and update endpoint protection signatures to include the observed IP address and associated SSL fingerprint. Ongoing collection of any new indicators, such as URL patterns or payload hashes, is recommended to maintain coverage against potential re‑emergence.
VirusTotal
15 det.
URLQuery
3 threat alerts
OTX references
URLScan
Gridinsoft
1/100
TLS sertifikası
Süresi dolmuş veya doğrulanmamış -85d
Gözlemlenen durum
Doğrulanmamış
DestroyList
Listede
Reports Sent
10
Veri kapsamı
VirusTotal
15 / 95
URLQuery
3 threat-system alerts
PhishStats
kontrol edilmedi
OTX
1 community reference
CF Radarı
scan completed
URLScan capture
saklanan rapor
URLScan verdict
malicious
DNS engellemeleri
kontrol edilmedi
TLS
Süresi dolmuş veya doğrulanmamış
WHOIS
not parsed
Ekran görüntüsü
3 captures · 3 sources
Yönlendirme zinciri
araştırılmadı
Gridinsoft
1/100
Güvenlik Sinyalleri
Gridinsoft Analysis
1 / 100
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | wingo.casino |
phishing | Phishing Block |
| Hagezi Threat Feed | wingo.casino |
malicious | Sinkholed |
| DNS4EU | wingo.casino |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Keşif
Checks
Reports
Kullanılabilirlik
28/29
Initial Abuse Report (#1)
Sent to 1 abuse contact at Cloudflare, Inc. with forensic evidence
abuse@spaceship.com
ICANN Escalation #2
Escalation #2 sent to 3 recipients including ICANN Compliance — follow-up record after a previous report
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #3
Escalation #3 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #4
Escalation #4 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #5
Escalation #5 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #6
Escalation #6 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #7
Escalation #7 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #8
Escalation #8 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #9
Escalation #9 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
ICANN Escalation #10
Escalation #10 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@spaceship.comabuse@identitydigital.comcompliance@icann.org
10 Reports Filed
10 report records were stored over 168 days; current observed status: Doğrulanmamış
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Alan adı
URLScan Verdict
Zararlı
score 100 Phishing report ↗
Sunucu / ASN
cloudflare · AS13335 CLOUDFLARENET, US
IP Context
Cloudflare shared edge
origin IP hidden
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
Kayıt kuruluşu
Cloudflare
(US)
(US)
IP adresi
172.67.169.241
CDN
Coğrafi konum San Francisco, US
San Francisco, USAğAS13335 · Cloudflare, Inc.
Kaynak IP, bir CDN proxy'sinin arkasına gizlenir. Uç adresine ilişkin Ters IP sonuçları ilgisiz kiracılar içerir; Kaynağı bulmak için pasif DNS veya sertifika şeffaflığı verileri gerekir.
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
İlk Kez Tespit Edildi01.11.2025
DOM Analysisanalyzed 28.07.2026score 0/100
IoC Extractionscanned 02.08.20260 wallet · 0 Telegram IoCs
Submitted URLhttps://wingo.casino/
Ad sunucularıbart.ns.cloudflare.comfay.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 20.02.2026scanned 11.03.2026
Favicon Hash
Case ID
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Akreditasyon bir sözleşmedir, güvenlik mührü değil.
ICANN ücretlerini doğrulayın
RAA §3.18'i okuyun
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Kötüye Kullanım Bildirimi Geçmişi · 10 stored reports over 68 days · click to expand
This timeline is built from stored outgoing report records. It documents timestamps and listed recipients, but does not by itself prove delivery, acknowledgement, or recipient action.
10 abuse reports filed over 168 days — latest observed status: Doğrulanmamış
The records name Cloudflare, Inc. as a recipient or subject. ICANN Compliance appears in the recipient field for at least one record.
10
reports
168
days
ICANN CC
-
Report #1 Feb 26, 2026 · 19:00 UTCPhishing Abuse Report: wingo[.]casinoabuse@spaceship.com
-
Report #2 ICANN CC 103h still active Mar 3, 2026 · 02:04 UTCESCALATION #2 (103h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #3 ICANN CC 139h still active Mar 4, 2026 · 14:53 UTCESCALATION #3 (139h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #4 ICANN CC 184h still active Mar 6, 2026 · 11:15 UTCESCALATION #4 (184h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #5 ICANN CC 331h still active Mar 12, 2026 · 14:02 UTCESCALATION #5 (331h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #6 ICANN CC 1265h still active Apr 20, 2026 · 15:01 UTCESCALATION #6 (1265h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #7 ICANN CC 1318h still active Apr 22, 2026 · 20:18 UTCESCALATION #7 (1318h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #8 ICANN CC 1411h still active Apr 26, 2026 · 17:17 UTCESCALATION #8 (1411h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #9 ICANN CC 1460h still active Apr 28, 2026 · 18:24 UTCESCALATION #9 (1460h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
-
Report #10 ICANN CC 1619h still active May 5, 2026 · 09:38 UTCESCALATION #10 (1619h active): Phishing - wingo[.]casinoabuse@spaceship.com abuse@identitydigital.com compliance@icann.org
Record scope: the timeline documents outgoing records stored by PhishDestroy. Delivery, acknowledgement, and subsequent action require separate recipient or infrastructure evidence.
Casino / Gambling License Verification
Unverified gambling license
This domain markets casino/gambling services. Scam casinos routinely display fake Curaçao, MGA, or Kahnawake license badges that don’t exist in the real registries. Always verify the license number against the official regulator database before depositing. If the site shows a seal but no clickable registry link — or the linked registry page doesn’t exist — treat it as fraudulent.
Bu Alan Adını Bildir
Kanıt sunun ve başkalarını korumaya yardımcı olun
VirusTotal Analizi
15 / 95 güvenlik sağlayıcıları bu alanı işaretledi
View on VT
Last analyzed Previous stored snapshot: 14 detections
ADMINUSLabs
alphaMountain.ai
BitDefender
CyRadar
ESET
Fortinet
G-Data
Kaspersky
Lionic
Seclookup
SOCRadar
Sophos
VIPRE
Webroot
Arşivlenmiş Kanıtlar
Wayback Machine Snapshot
Kanıt incelemesi için geçmişe ait bir anlık görüntü mevcuttur
Kanıtlar ve Dış Raporlar
Güvenlik Analizi
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-1767733771-wingo.casino Recipient: abuse@spaceship.com OSINT ve İstihbarat
DNS ve Ağ
SEO ve Alan Adı
Bu Siteden Etkilendiniz mi?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Action Fraud
İngiltere, Galler ve Kuzey İrlanda'da dolandırıcılık ve siber suçları bildirin
Contact centre0300 123 2040
PhishDestroy listing review Bir kolluk kuvveti raporu değil
Alan Adı İtirazı
Bu alanın sahibiyseniz ve girişin hatalı olduğunu düşünüyorsanız inceleme isteğinde bulunun
Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
97 ülke rehberi
Yapay zeka destekli taslak — olay ayrıntıları yapay zeka sağlayıcısı tarafından işlenir
Kendiniz inceleyin ve gönderin
İlgili Altyapı ve Raporlar
Content matches 4
Paylaşılan Cloudflare ucuna ilişkin diğer raporlar 2
Bu raporlar aynı paylaşılan uç IP'ye çözümlenir. Rapor keşfine yardımcı olurlar ancak ortak mülkiyeti veya paylaşılan bir kaynak sunucuyu ima etmezler.
Aynı kayıt kuruluşu: Cloudflare 6
tzr-jern.maxwell15.workers.dev 
gfo365.com 
ethguanfangweiyilianjie.com Genericcrypto impersonation 8
These domains also target Genericcrypto users. View all Genericcrypto threats →
xamanwindowswallet.com Gambler Scam kit 8
Part of the Kumar Dolandırıcılığı phishing campaign. View all campaign domains →
treyspin.com 
Son tehdit raporları 4
PhishDestroy veritabanından yeni eklenen raporlar. Bu keşif bağlantıları, paylaşılan altyapı veya mülkiyet anlamına gelmez.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin