VirusTotal
1 / 92 engine detections
打开报告lets-play-wolinak.site:冒充 Mastercard,PhishDestroy 于 2026-10-21 检测到。风险:关键(98/100)。注册商:Namecheap。托管:Cloudflare, Inc。PhishDestroy 已发送1 份滥用举报。VirusTotal:1/92 个引擎标记。请勿输入登录凭据,也不要连接钱包。
“Le Grand Royal Wôlinak Online”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 25 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
冒充 Mastercard: lets-play-wolinak.site — 未验证. 证据摘要: VirusTotal 1/92 (alphaMountain.ai); URLScan malicious verdict; 2 external blocklist matches (MetaMask…
The evidence summary below uses retained observations. Each source keeps its own collection date.
1 / 92 engine detections
打开报告恶意
打开报告扫描报告
打开报告4 community references
打开报告扫描报告
打开报告无威胁标记
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a15fb2-692f-74e1-bbc3-a080ded53b13 |
|---|---|
| Final url | https://lets-play-wolinak.site/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://lets-play-wolinak.site/",
"from": "http://lets-play-wolinak.site/",
"status": 307
}
] |
| Ip | 172.67.169.170 |
| Contacted domains | [
"fonts.gstatic.com"
] |
| Contacted IP addresses | [
"142.251.14.94",
"172.67.169.170"
] |
| Asns | [
"15169",
"13335"
] |
| Countries | [
"US"
] |
| Document hash | bef71c3bdebfed3af9851d97f1719359a62f451a257fd7db9d2a31e220442ca4 |
| Script hashes | [
"3d20952997e3cd3356b1de806578c2c43543744083090fba4871c26b32915972"
] |
| Globals | [
"appDataConfigs",
"aldfs",
"webpackChunkSkakAppPWA",
"isSafari",
"__swInitStarted",
"__afterInitSWFunctionsStarted",
"aiswfs",
"_posPwaInst",
"_checkPwaInstalled",
"__reactRouterVersion",
"__bverr",
"swReg"
] |
| Cookies | [
"piuid621ioo",
"pcpnzdqnxt",
"pwaidmd0sek",
"splitidm45lf0",
"fpvdate651r4m",
"sdataj0gkjq"
] |
| Storage keys | [
"appstore",
"piuid",
"hdata"
] |
| Tls | {
"san": [
"*.lets-play-wolinak.site",
"lets-play-wolinak.site"
],
"cipher": "AES_128_GCM",
"issuer": "YE1",
"subject": "lets-play-wolinak.site",
"protocol": "QUIC",
"valid_to": "2027-01-19T07:54:23Z",
"valid_from": "2026-10-21T07:54:24Z"
} |
| 域名年龄(天) | 6 |
| Apex age days | 6 |
| Tls age days | 0 |
| TLS 有效天数 | 89 |
| Requests | 18 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 94,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"googleplay"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Google Play"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload",
"content-security-policy": "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:;",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"permissions-policy": "camera=(), microphone=(), geolocation=(), payment=()",
"cross-origin-opener-policy": "same-origin",
"cross-origin-resource-policy": "same-site"
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 55,
"malicious": 1,
"suspicious": 0,
"undetected": 36
} |
|---|---|
| Vendor labels | {
"alphaMountain.ai": "phishing"
} |
| Reputation | 0 |
| Categories | {
"alphaMountain.ai": "Phishing (alphaMountain.ai)"
} |
| 注册商 | NAMECHEAP INC |
| 创建 | 2026-10-14T09:42:07Z |
| Expires | 2027-10-14T09:42:07Z |
| Updated | 2026-10-21T08:42:42Z |
| 首次发现 | 2026-10-21T08:59:13Z |
| DNS 记录 | [
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "martha.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.47.6"
},
{
"ttl": 21600,
"type": "NS",
"value": "simon.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.169.170"
},
{
"ttl": 21600,
"type": "NS",
"value": "martha.ns.cloudflare.com"
}
] |
| Dns at | 2026-10-21T19:08:54Z |
| Jarm | 27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c |
| Certificate | {
"san": [
"*.lets-play-wolinak.site",
"lets-play-wolinak.site"
],
"issuer": "Let's Encrypt / YE1",
"serial": "666375898d2daecf0e54dd834eb4c60e3c3",
"sha256": "64cafca35ed1617fbf480274492a3daa7b908f308a3e3fe70b8703f4cb054c78",
"subject": "lets-play-wolinak.site",
"valid_to": "2027-01-19T07:54:23Z",
"valid_from": "2026-10-21T07:54:24Z"
} |
| 注册记录 | {
"registrar": "NAMECHEAP INC",
"registrar_iana_id": "1068",
"registrar_url": "http://www.namecheap.com",
"created": "2026-10-14T09:42:07Z",
"updated": "1-01-01T00:00:00Z",
"expires": "2027-10-14T09:42:07Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"martha.ns.cloudflare.com",
"simon.ns.cloudflare.com"
],
"dnssec": "unsigned"
} |
| Registry data | {
"status": [
"client transfer prohibited"
],
"events": {
"registration": "2026-10-14T09:42:07Z",
"registrar expiration": "2027-10-14T09:42:07Z",
"last update of RDAP database": "2026-10-21T08:59:02Z"
}
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "lets-play-wolinak.site"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_count": 0
} |
| Web archive observations | {
"last": "2026-10-21T18:23:27Z",
"first": "2026-10-21T18:23:27Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 5980
} |
| Crawler rules | {
"agents": [
"*"
],
"present": true
} |
| 页面标题与元数据 | {
"title": "Le Grand Royal Wôlinak Online",
"robots": "noindex, nofollow, noarchive",
"themeColor": "#000000",
"description": "🎰 Le Grand Royal Wôlinak – Official App for Canadian Players 🇨🇦\n\nDiscover a premium gaming experience designed for players in Canada. Enjoy a secure"
} |
| Trackers | {
"requests": 19,
"trackers": [
{
"name": "Google Static",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 3
}
]
} |
| 表单与混合内容 | {
"third_party_scripts": 0
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 8,
"tls": 32,
"wait": 742,
"connect": 11,
"download": 1
},
"response_ms": 794
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443,
8080
]
} |
| Carbon | {
"bytes": 9330,
"co2_grams": 0.0003,
"cleaner_than": 73
} |
| Dns server | {
"ns": [
{
"ip": "172.64.34.142",
"host": "martha.ns.cloudflare.com"
},
{
"ip": "173.245.59.232",
"host": "simon.ns.cloudflare.com"
}
],
"zone": "lets-play-wolinak.site"
} |
| Cookies | {
"cookies": [
{
"name": "piuidsktnov",
"http_only": true,
"same_site": "Lax"
},
{
"name": "pcpn64uax9",
"http_only": true,
"same_site": "Lax"
},
{
"name": "pwaid6mgdol",
"http_only": true,
"same_site": "Lax"
},
{
"name": "splitidj1p7rq",
"http_only": true,
"same_site": "Lax"
},
{
"name": "fpvdatexf0nhw",
"http_only": true,
"same_site": "Lax"
},
{
"name": "sdatamoou8k",
"http_only": true,
"same_site": "Lax"
}
]
} |
| Location | {
"ip": "104.21.47.6",
"asn": "13335",
"org": "Cloudflare, Inc.",
"city": "Toronto",
"country": "CA"
} |
| Ssl | {
"issuer": "Let's Encrypt / YE1",
"subject": "lets-play-wolinak.site"
} |
| DNS 记录 | {
"A": [
"172.67.169.170",
"104.21.47.6"
],
"NS": [
"simon.ns.cloudflare.com",
"martha.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"martha.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418078859, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"header": "max-age=31536000; includeSubDomains; preload",
"message": "Site is compatible with the HSTS preload list!",
"compatible": true
} |
| HTTP security policies | {
"xFrameOptions": "SAMEORIGIN",
"referrerPolicy": "strict-origin-when-cross-origin",
"xXSSProtection": false,
"permissionsPolicy": "camera=(), microphone=(), geolocation=(), payment=()",
"xContentTypeOptions": "nosniff",
"contentSecurityPolicy": "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data:",
"strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
"crossOriginOpenerPolicy": "same-origin",
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": "same-site"
} |
| Firewall | {
"waf": "Cloudflare",
"has_waf": true
} |
| Get ip | {
"ip": "104.21.47.6",
"family": 4
} |
| Redirects | {
"chain": [
"https://lets-play-wolinak.site"
]
} |
| Tech stack | {
"technologies": [
"core-js",
"HSTS",
"Cloudflare",
"Webpack",
"PWA",
"LottieFiles",
"Module Federation",
"HTTP/3"
]
} |
| Page links | {
"internal_count": 1
} |
| 注册记录 | {
"registrar": "NameCheap, Inc.",
"created": "2026-10-14T09:42:07Z",
"updated": "2026-10-21T08:42:42Z",
"expires": "2027-10-14T09:42:07Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"martha.ns.cloudflare.com",
"simon.ns.cloudflare.com"
]
} |
| HTTP headers | {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload",
"content-security-policy": "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; media-src 'self'",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"permissions-policy": "camera=(), microphone=(), geolocation=(), payment=()",
"cross-origin-opener-policy": "same-origin",
"cross-origin-resource-policy": "same-site"
}
} |
不是。PhishDestroy 将 lets-play-wolinak.site 归类为“冒充 Mastercard”(风险:关键,98/100),首次检测于 2026-10-21。VirusTotal:1/92 个引擎标记。请将该网站视为不安全。
不安全。请勿在 lets-play-wolinak.site 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
最近检查
对于该 gTLD,上述注册商依据 ICANN 认证协议运营。以下链接提供官方收费标准及现行的 DNS 滥用合规指南。
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP 声誉不属于此域。
martha.ns.cloudflare.comsimon.ns.cloudflare.com位置信息描述的是 IP 网络。
64cafca35ed1617fbf480274492a3daa7b908f308a3e3fe70b8703f4cb054c78*.lets-play-wolinak.sitelets-play-wolinak.site已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Google PageSpeed Insights — 移动端性能审核: lets-play-wolinak.site · checked Oct 21, 2026
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
http://lets-play-wolinak.site/https://lets-play-wolinak.site/Content-Type: text/html; charset=UTF-8Server: cloudflareCache-Control: no-cache, no-store, must-revalidateCF-Cache-Status: DYNAMICContent-Encoding: gziph3=":443"; ma=86400no-cache, no-store, must-revalidateDYNAMICa4e248a0cc50c0f6-YYZkeep-alivegzipdefault-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; media-src 'self' https:; worker-src 'text/html; charset=UTF-8same-originsame-siteWed, 21 Oct 2026 18:21:45 GMT{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}camera=(), microphone=(), geolocation=(), payment=()strict-origin-when-cross-origin{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fVOAdOOJDoQt%2B0DaRkSSxVf6NFDoP8DSFJOGule0VFwwpZOVcySPq%2BuYkjxyLeF8IDyKi4vxwUx%2BYxuteAnioQHfaPzGoL2BxzTDZIGSEuzhNbvvHzvvfqpZTHjfwpLxnnsgFEqIbcloudflarecfCacheStatus;desc="DYNAMIC"max-age=31536000; includeSubDomains; preloadchunkednosniffSAMEORIGIN由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
0→1
2→观测已保留
1→2
dns_inactive→live_content
content_served
未知→dns_inactive
dns_nxdomain
0→1
可访问
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
lets-play-wolinak.site
PD-20261021-C65524 Recipient: abuse@namecheap.com Registrar: Namecheap Inc (United States) Policy Violations: Domain Registration Agreement prohibits hacking, misuse of domain to conduct attacks, scam and fraudulent activities; AUP allows immediate suspension Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
lets-play-wolinak.site)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。