metawin[.]best
“Metawin Crypto Casino | 20 Free Spins every Friday”
metawin.best — 未验证. 诈骗类型:Crypto Gambling. 证据摘要: VirusTotal 10/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. 注册商: NETIM SAS.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain metawin.best was registered on March 11 2026 through NETIM SAS and remains active with an HTTP 200 response as of July 12 2026. It presents a page titled Metawin Crypto Casino | 20 Free Spins every Friday and directly impersonates a crypto casino gambling brand. The domain is listed on three security blocklists and has been flagged in one AlienVault OTX pulse, with explicit blocks recorded from PhishDestroy, MetaMask and SEAL. Gridinsoft assigns it a trust score of 0 out of 100 and VirusTotal reports detections from two of 95 vendors. The observed phishing kit is identified as Gambler Scam and the abuse classification is gambling-related brand impersonation.
Infrastructure analysis reveals the domain resolves to IP address 104.21.10.215 hosted on Cloudflare infrastructure in the United States. Nameservers are configured as kianchau.ns.cloudflare.com and monika.ns.cloudflare.com. The certificate is issued by Google Trust Services under the WE1 profile. These details are consistent with common proxy and hosting patterns used to obscure origin infrastructure while maintaining accessibility.
Known evidence indicates clear brand impersonation tied to a gambling scam kit, supported by multiple independent blocklist entries and low trust scores. What remains uncertain is the precise campaign duration, operator identity and volume of successful victim interactions, as these elements are not captured in the current observable data. Defenders should block the domain at DNS and network layers, monitor for similar registrations under the metawin string, and update internal blocklists with the recorded IP and nameserver values to limit further exposure.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of metawin.best · checked Mar 26, 2026
网站配置分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。