winqon[.]com

This domain, winqon.com, is identified as a brand-impersonation threat targeting users of cryptocurrency-based gambling platforms. The site presents itself as a legitimate blockchain casino under the name "WINQON," using the page title "WINQON | Play at the best online casino based on Blockchain." The specific threat involves luring victims into depositing cryptocurrency or entering login credentials under the false pretense of a high-reward gambling environment. Analysis indicates the domain is designed to harvest sensitive financial data or directly siphon funds from unsuspecting users, exploiting the irreversible nature of blockchain transactions to prevent recovery of stolen assets.

Technical evidence supports the classification of this domain as malicious. The domain was registered on April 28, 2025, through NameSilo, LLC, and resolved to the IP address 69.5.189.58. As of the latest scan, 3 out of 95 security vendors on VirusTotal flagged winqon.com as malicious, and it appears on one security blocklist. The domain has since been taken offline, but its infrastructure and registration details remain indicators of compromise. The use of a recently created domain, combined with the impersonation of a high-risk sector like crypto gambling, aligns with tactics observed in credential theft and financial fraud campaigns.

Users who visited winqon.com or interacted with its content should take immediate action to mitigate potential risks. If credentials were entered, affected accounts must be secured by changing passwords and enabling multi-factor authentication on all associated platforms. Cryptocurrency wallets used on the site should be considered compromised; users are advised to transfer remaining funds to a new wallet and monitor transaction histories for unauthorized activity. Browser data, including cookies and cached files, should be cleared to remove any residual tracking mechanisms. Additionally, affected individuals should report the domain to relevant financial and cybersecurity authorities to assist in broader threat mitigation efforts.