winxbeast[.]com

Analysis of the domain winxbeast.com indicates it was associated with a cryptocurrency-based gambling scam. The domain resolved to the IP address 69.5.189.54, hosted on AS42624 (Global-Data System IT Corporation) in Switzerland. It was registered on May 22, 2025, through Web Commerce Communications Limited (WebNic.cc), a registrar frequently observed in fraudulent domain registrations. The page title, 'WINXBEAST | Play at the best online casino based on Blockchain,' explicitly identifies the site as a blockchain casino, aligning with the classified scam type of 'Crypto Scam.' Scamadviser assigned a trust score of 1 out of 100, reflecting a high level of suspicion.

Three out of 93 security vendors on VirusTotal flagged the domain as malicious, providing preliminary but limited detection coverage. The domain appeared on one security blocklist and was actively blocked by PhishDestroy, further corroborating its malicious classification. The phishing kit in use was identified as 'Gambler Scam,' a known framework for fraudulent gambling sites. The SSL certificate, issued under the identifier E6, does not provide meaningful assurance of legitimacy, as fraudulent domains frequently employ valid but low-assurance certificates.

As of the report date, the domain has been taken offline, though its prior infrastructure and registration details remain relevant for historical analysis and threat intelligence correlation. Defenders should treat this domain as confirmed malicious within the context of cryptocurrency-based gambling fraud. Network-level blocking of the IP 69.5.189.54 and monitoring for newly registered domains under the same registrar or ASN may mitigate related threats. Given the domain's offline status, further forensic analysis of its content is not currently possible, and the exact user interaction flow remains unconfirmed.