winnaria[.]com

The domain winnaria.com was registered on July 24, 2025 through NiceNIC International Group Co., Limited and is currently listed as offline. The site resolved to the IPv4 address 69.5.189.54, which belongs to AS42624 Global-Data System IT Corporation and is geolocated in Switzerland (CH). No TLS certificate was presented, indicating clear‑text HTTP only. The authoritative name servers are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserver.

The page title returned by the server reads “WINNARIA | Play at the best online casino based on Blockchain”, matching the documented “Crypto Scam” classification and the “Gambler Scam” kit. The campaign impersonates the foundation brand, as indicated by the intelligence feed. Reputation scoring from Gridinsoft assigns a trust score of 1 out of 100, reflecting extreme maliciousness. The domain is present on one security blocklist and has been actively blocked by the PhishDestroy service.

VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain, confirming malicious behavior. Defenders should add 69.5.189.54 and the full domain name to network‑level deny lists, enforce HTTPS‑only policies to prevent accidental clear‑text connections, and monitor the NiceNIC registrar for any new registrations that reuse the same name servers or similar kit signatures. Continuous hunting for the Gambler Scam kit artifacts in email and web traffic is recommended, as well as periodic re‑scanning of the domain should it reappear. The elevated risk rating reflects the combination of low trust score, brand impersonation, and active blocklist presence.