MALICIOUS — HIGH
winx[.]world
This site, winx.world, poses a threat as a brand impersonation scam.
- VirusTotal
- 5/94
- Blocklists
- No stored match
- Kullanılabilirlik
- İçerik kullanılamıyor · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
winx.world — İçerik kullanılamıyor (HTTP 502). Marka kimliğine bürünme: Google; Dolandırıcılık türü: Brand Impersonation. Kanıt özeti: VirusTotal 5/94 (alphaMountain.ai, Bfore.Ai PreCrime, Gridinsoft, Seclookup, SOCRadar); URLQuery 1 alert; PhishDestroy score 69/100. Kayıt kuruluşu: Web Commerce Communica….
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
winx.world Phishing Intelligence Report - PhishDestroy
The domain winx.world, impersonating Google, is currently down or taken down, indicating a past phishing operation.
This site, winx.world, poses a threat as a brand impersonation scam. The page title claims to be "Google Chrome – The Fast and Secure Web Browser Built to be Yours," indicating it impersonates the Google brand. The threat is that visitors may be deceived into believing they are on an official Google Chrome page, potentially leading to malware delivery or credential theft.
Technical evidence shows the site was flagged by 5 out of 95 VirusTotal vendors. It is registered with Web Commerce Communications Limited and hosted on IP address 142.250.195.132 in the US, using AS13395 Cloudflare, Inc. The domain was created on September 24, 2025, and its nameservers are mitch.ns.cloudflare.com and serena.ns.cloudflare.com. The site has a DOM risk score of 63.
The site is currently DOWN/OFFLINE. The risk level is high, as indicated by the 5 detections, inclusion on 1 blocklist, and flags from sources including alphaMountain.ai and SOCRadar. Users should avoid any interaction with this domain.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | winx.world |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
PD-20260316-4BC099 Recipient: compliance_abuse@webnic.cc Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.