Cloudflare Radar
Шкідливий
Відкрити звіт“Slxwin: Most Popular Online Crypto Casino Based on Blockchain”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@globaldomaingroup.com.
The latest stored availability evidence still shows the domain reachable; 4 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
шахрайське криптоказино: slxwin.com — Доступно · доступ обмежено (HTTP 403). Зведення доказів: VirusTotal 0/92; URLScan malicious verdict; CF Radar malicious…
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
Шкідливий
Відкрити звітШкідливий
Відкрити звіт0 / 92 engine detections
Відкрити звітScan report
Відкрити звіт4 community references
Відкрити звітNo threat flag
Відкрити звітResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
slxwin.com posed as a blockchain gambling platform under the title "Slxwin: Most Popular Online Crypto Casino Based on Blockchain," aimed at crypto holders looking for a place to bet. PhishDestroy classifies it as a fraudulent gambling site and first flagged it on 2026-10-16. The site went offline on 2026-10-17, and by 2026-10-19 its content was blocked at the provider level.
The page matches the "Gambler Scam" kit, a template for fake casinos that look polished and promise instant, provably fair crypto payouts. Players deposit coins, often see inflated winnings or a sign-up bonus on their dashboard, and then hit a wall when they try to cash out. The operators typically demand extra deposits, "verification" payments or withdrawal fees, and none of those payments unlock a payout. Every coin sent to the platform's deposit addresses should be treated as lost.
urlscan.io rated the site malicious and tagged it with generic crypto and crypto-scam brand signatures, which fits a fake casino that impersonates no specific company. VirusTotal returned no detections from any of its 92 engines on 2026-10-16, so a clean result there means nothing for this domain. Four AlienVault OTX threat pulses reference it, and PhishDestroy lists it on its own blocklist.
The domain was registered on 2026-04-23 through Global Domain Group LLC, roughly six months before PhishDestroy detected it. That gap suggests the operation either ran unnoticed for months or held the domain in reserve before launching. Traffic passed through Cloudflare's network, with the address geolocated to Canada, so the actual origin server stayed hidden behind the proxy.
If you deposited funds on slxwin.com, do not pay any further fee, tax or "unlock" amount, because these requests only extend the theft. Save your transaction hashes, the deposit addresses you were given and any chat logs with "support," then report them to the exchange you sent from and to local law enforcement. Be wary of anyone who later offers to recover your money, since recovery scams often target people who have already lost funds. If you reused a password from this site elsewhere, change it on those accounts. Defenders should block the domain and treat new crypto-casino domains built on the Gambler Scam template as suspicious even when VirusTotal shows them clean.
Репутація Edge-IP не пов’язана з цим доменом.
kanye.ns.cloudflare.comlady.ns.cloudflare.comLocation describes the IP network.
316a7fd941f4f58b7705295705b5879c9a29e0b8370915df97387cfb5981c9a5Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of slxwin.com · checked Oct 16, 2026
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
http://slxwin.com/https://slxwin.com/Content-Type: text/html; charset=UTF-8Server: cloudflareCF-Cache-Status: DYNAMICContent-Encoding: gzipDYNAMICa4b4e160196b3a82-FRAkeep-alivegziptext/html; charset=UTF-8Fri, 16 Oct 2026 06:06:56 GMT{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=bImSnaL3ti9KaZL%2B9p4Qa2RvRubt4ZTBl5v%2Bm1RH%2FrbONiDIfnmlatBBP16Wj2kRC0GDbj0GIPWFxReGsw3oTQL66%2FdftfrmfzM%2B6l45Dcg6mfnk05oh0s%2F5V4yc"}]}cloudflarechunkedOriginValues retained by the collector; long values may be shortened during collection.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
cloudflare_ban: raw=cf_phishing_block; http=403; via=https_proxy; server=cloudflare; provider_error=cloudflare_phishing_interstitial
slxwin.com
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Невідомо→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
Невідомо→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
Доступний→Недоступно
Невідомо→live_content
content_served
Доступний
4 community references
View sourceNo threat flag
View source0/92 engine detections
View sourcePD-20261016-27E3FF
slxwin.com
View sourcePage captured
View sourcePD-20261016-27E3FF Recipient: abuse@globaldomaingroup.com Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
slxwin.com)Навіть якщо ви не знаєте всіх подробиць — все одно подати заяву. Навіть неповна інформація все одно допомагає у розслідуванні.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Аналіз загроз за допомогою збереженого списку блокувань, WHOIS, DNS і загальнодоступних доказів сканування
Сканувати заразДодавайте підозрілі домени до нашої бази даних загроз — захищайте спільноту
ПовідомитиОстанні звіти про фішинг і помічені зміни доступності
ВідстежуватиСлідкуйте за актуальними загрозами або оскаржте цей запис, якщо вважаєте, що це помилкова тривога
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.