twicecoin[.]fun

The domain twicecoin.fun is a confirmed phishing site engaged in brand impersonation and cryptocurrency scams. It falsely presents itself as a blockchain-based online casino, impersonating a foundation to deceive users into depositing cryptocurrency. No drainer kit was identified, but the site poses an elevated risk due to its fraudulent activity. As of the latest verification, twicecoin.fun has been taken offline.

Technical indicators confirm the malicious nature of twicecoin.fun. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through REGRU-RU on January 17, 2025, it resolves to the IP address 172.67.185.127, hosted on Cloudflare's infrastructure (AS13335) in the US. The site lacks an SSL certificate, and its nameservers are bruce.ns.cloudflare.com and zara.ns.cloudflare.com. The observed page title, 'TWICECOIN | Play at the best online casino based on Blockchain,' aligns with its fraudulent cryptocurrency theme.

Users who interacted with twicecoin.fun should take immediate action to secure their assets. Since this is a cryptocurrency scam, victims should revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity. Report the domain to relevant platforms, including the registrar (REGRU-RU), Cloudflare, and cryptocurrency fraud reporting services like Chainabuse or the FBI’s IC3. Enable two-factor authentication on all accounts and remain vigilant for further phishing attempts.