1-win[.]pro
“1-win: Elon Musk’s Official Crypto Casino Powered by Blockchain”
证据摘要
The domain 1-win.pro was observed on July 12, 2026 presenting a page titled “1‑win: Elon Musk’s Official Crypto Casino Powered by Blockchain”. The HTTP response returned status code 200, confirming an active web service. The site is classified as high‑risk brand impersonation aimed at cryptocurrency casino and gambling audiences, and its current status is listed as active.
Technical tracing shows the domain was registered on March 2, 2026 through Global Domain Group LLC. DNS resolution points to IP address 188.114.97.3, located in the United States and advertised under ASN 13335 belonging to Cloudflare, Inc. Authoritative name servers are lina.ns.cloudflare.com and arvind.ns.cloudflare.com, and the TLS certificate is issued by Let’s Encrypt (E7). The use of a free, widely‑trusted certificate and a reputable CDN does not obscure the malicious intent but may reduce visual suspicion for end users.
Content analysis identifies the deployment of a known Gambler Scam phishing kit that fabricates a brand‑impersonation narrative involving a high‑profile individual and claims a blockchain‑powered casino operation. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal scans have flagged the domain by five of ninety‑five security vendors, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the assessment of malicious behavior.
Defenders should add 1‑win.pro to domain blocklists, enforce sink‑hole routing for its IP address, and monitor for related activity emerging from the Cloudflare edge network. Because the site leverages a legitimate certificate and a popular CDN, detection may rely on behavioral indicators such as the specific page title, the Gambler Scam kit fingerprint, and the brand‑impersonation language. Continuous monitoring of the associated IP range and any newly observed subdomains is recommended, as additional infrastructure could be provisioned without further public disclosure.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
检测时间线
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
-
域名状态
可访问 → 无法访问
-
域名状态
无法访问 → 可访问
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控