nustwin.com: fake crypto casino exposed

{
  "domain": "nustwin.com",
  "scanId": "c5886f24942148fd931f73c25e57f4c4",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-05-11T14:32:09.969Z",
  "ageDays": 123,
  "fresh": false,
  "verdict": "dangerous",
  "trustScore": 1,
  "badges": [
    {
      "name": "antivirus_tier4",
      "chain": "antivirus",
      "tier": 4,
      "maxTier": 4,
      "score": -99,
      "description": "Detected by 10+ engines"
    },
    {
      "name": "blacklists_tier1",
      "chain": "blacklists",
      "tier": 1,
      "maxTier": 2,
      "score": -38,
      "description": "Flagged by 1 blacklist provider (Google Safe Browsing, Cloudflare, etc.)"
    },
    {
      "name": "scam_farm_tier4",
      "chain": "scam_farm",
      "tier": 4,
      "maxTier": 4,
      "score": -12,
      "description": "Shares code with 10+ domains"
    },
    {
      "name": "domain_age_tier5",
      "chain": "domain_age",
      "tier": 5,
      "maxTier": 5,
      "score": -3,
      "description": "Domain < 30 days"
    }
  ],
  "reachable": true,
  "unreachableReason": null,
  "category": null,
  "categoryReasoning": "Site flagged by Cloudflare as suspected phishing — actual content not accessible",
  "regulatorFlagged": false,
  "regulators": [],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Cloudflare",
      "category": "cdn"
    },
    {
      "name": "Tailwind CSS",
      "category": "css-framework"
    },
    {
      "name": "Cloudflare Turnstile",
      "category": "security"
    }
  ],
  "antivirus": {
    "detections": [
      {
        "engine": "ADMINUSLabs",
        "result": "malicious",
        "engineType": "security_vendor"
      },
      {
        "engine": "alphaMountain.ai",
        "result": "phishing",
        "engineType": "security_vendor"
      },
      {
        "engine": "BitDefender",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Chong Lua Dao",
        "result": "malicious",
        "engineType": "phishing_authority"
      },
      {
        "engine": "CRDF",
        "result": "malicious",
        "engineType": "phishing_authority"
      },
      {
        "engine": "CyRadar",
        "result": "phishing",
        "engineType": "security_vendor"
      },
      {
        "engine": "Forcepoint ThreatSeeker",
        "result": "phishing",
        "engineType": "security_vendor"
      },
      {
        "engine": "Fortinet",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "G-Data",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Kaspersky",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Lionic",
        "result": "phishing",
        "engineType": "security_vendor"
      },
      {
        "engine": "Netcraft",
        "result": "malicious",
        "engineType": "phishing_authority"
      },
      {
        "engine": "Sophos",
        "result": "malware",
        "engineType": "antivirus"
      },
      {
        "engine": "VIPRE",
        "result": "malware",
        "engineType": "antivirus"
      }
    ],
    "enginesTotal": 93,
    "permalink": "https://www.virustotal.com/gui/url/aHR0cHM6Ly9udXN0d2luLmNvbS8",
    "scannedAt": "2026-05-11T14:31:47.536Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    },
    {
      "provider": "cloudflare_phishing",
      "flagged": true,
      "threats": [
        "PHISHING"
      ]
    }
  ],
  "registration": {
    "registrar": "Fewmoretaps OU d/b/a Trustname.com",
    "registrarIanaId": "4318",
    "createdAt": "2026-05-03T03:11:03.000Z",
    "updatedAt": "2026-05-03T03:11:17.000Z",
    "expiresAt": "2027-05-03T03:11:03.000Z",
    "ageDays": 8,
    "ageText": "8d",
    "privacyProtected": false,
    "nameservers": [
      "nelci.ns.cloudflare.com",
      "rustam.ns.cloudflare.com"
    ]
  },
  "certificate": {
    "issuer": "Let's Encrypt",
    "validFrom": "2026-05-03T02:15:50.000Z",
    "validUntil": "2026-08-01T02:15:49.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "172.67.186.7",
    "countryCode": "US",
    "countryName": "United States",
    "city": "San Francisco",
    "provider": "Cloudflare, Inc.",
    "asn": 13335,
    "serverSoftware": "cloudflare",
    "mapImageUrl": null,
    "latitude": 37.7621,
    "longitude": -122.3971,
    "behindCloudflare": true
  },
  "timing": {
    "dnsMs": 1,
    "connectMs": 56,
    "tlsMs": 34,
    "ttfbMs": 31,
    "downloadMs": 2,
    "domReadyMs": 171,
    "loadCompleteMs": 365
  },
  "resources": [
    {
      "kind": "images",
      "count": 3,
      "bytes": 930
    },
    {
      "kind": "scripts",
      "count": 2,
      "bytes": 0
    },
    {
      "kind": "xhr",
      "count": 2,
      "bytes": 0
    },
    {
      "kind": "documents",
      "count": 2,
      "bytes": 0
    },
    {
      "kind": "fetch",
      "count": 1,
      "bytes": 1
    },
    {
      "kind": "stylesheets",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 11,
    "totalBytes": 931,
    "failedRequests": 2,
    "uniqueDomains": 2,
    "thirdPartyRatio": 0.7273,
    "httpsPercentage": 100
  },
  "cookies": [],
  "identity": {
    "finalUrl": "https://nustwin.com/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/c5886f24942148fd931f73c25e57f4c4"
  },
  "telemetry": {
    "statusCode": 403,
    "durationMs": 23064,
    "scraper": "patchright",
    "attempts": 1,
    "source": "single",
    "contentType": "text/html; charset=utf-8"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": false,
      "value": null
    },
    {
      "key": "strict_transport_security",
      "present": false,
      "value": null
    },
    {
      "key": "x_frame_options",
      "present": true,
      "value": "SAMEORIGIN"
    },
    {
      "key": "x_content_type_options",
      "present": false,
      "value": null
    },
    {
      "key": "referrer_policy",
      "present": true,
      "value": "same-origin"
    },
    {
      "key": "permissions_policy",
      "present": false,
      "value": null
    },
    {
      "key": "x_xss_protection",
      "present": false,
      "value": null
    },
    {
      "key": "cross_origin_opener_policy",
      "present": false,
      "value": null
    }
  ],
  "redirects": [],
  "transactions": [
    {
      "url": "https://nustwin.com/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 403,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://nustwin.com/cdn-cgi/styles/cf.errors.css",
      "method": "GET",
      "resourceType": "stylesheet",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://challenges.cloudflare.com/turnstile/v0/api.js",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 302,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://nustwin.com/cdn-cgi/images/icon-exclamation.png?1376755637",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 452,
      "thirdParty": false
    },
    {
      "url": "https://challenges.cloudflare.com/turnstile/v0/g/fe6331af5207/api.js",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/4mndg/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal?lang=auto",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 86,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1394817869:1778506116:Ae5lWhTKxCp5OIY74q8lO0toZeCgpJh96zkU32TYwg8/9fa1e3ac5d68db03/ZJwCbhcCHcpZpDrRvXuXgLyAgt8XLJok0pnJ8w4tNzA-1778509907-1.2.1.1-Kwj66re4cr5wxj2W30Dp7.0LTZ7wRdYeWXjQICgZxvZLm.loULP4NuZP5yqGntyQ",
      "method": "POST",
      "resourceType": "xhr",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9fa1e3ac5d68db03/1778509908238/kRfhuVUXBcnBH2-",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 392,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9fa1e3ac5d68db03/1778509908239/4dea98d9381d2ac96b3e1f3a084bbf0f7e2d01516665c7c04aa085a922bfb034/M7c5U83-vsEyhoK",
      "method": "GET",
      "resourceType": "fetch",
      "statusCode": 401,
      "bytes": 1,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1394817869:1778506116:Ae5lWhTKxCp5OIY74q8lO0toZeCgpJh96zkU32TYwg8/9fa1e3ac5d68db03/ZJwCbhcCHcpZpDrRvXuXgLyAgt8XLJok0pnJ8w4tNzA-1778509907-1.2.1.1-Kwj66re4cr5wxj2W30Dp7.0LTZ7wRdYeWXjQICgZxvZLm.loULP4NuZP5yqGntyQ",
      "method": "POST",
      "resourceType": "xhr",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    }
  ],
  "hasCapture": false,
  "archive": {},
  "networkSize": 349
}